I used to be in the same boat, up until a few weeks ago when I updated the BIOS on my new work laptop. It's been a shitshow ever since: it takes around one minute to POST, the webcam isn't detected anymore, it doesn't go to sleep.
And the best part? "Because this update contains security features, it cannot be rolled back".
---
edit to name and shame: HP EliteBook 845 G8
This is a real issue though, there is the risk of failure during the procedure, less so than it once was, but then the risk that the update actually performs worse than the previous version.
The latter I don't know how we resolve.
I was usually able to this, and my other HP machines propose to do a BIOS downgrade. But in this particular case I haven't managed to do a rollback, even with a "BIOS recovery", whatever that is.
Perhaps they can get in touch with your supplier to pass a complaint about the poor update so they might be able to pass it on to their devs and hopefully fix the issue?
I would try have your org reach out to the middleman and see what they can do, suppliers, resellers and partners etc can be quite helpful in encouraging manufacturers to pay attention.