I'm unsure of the security of anything on modern Apple operating systems or hardware, since I can't review the source code or hardware schematics.
We do have a bunch of leaked intel firmware, or so I'm told...
I wish this weren’t the case, but whatever PureDarwin has right now is probably about the closest you can get to a Darwin environment that boots without nonfree code.