But it is way too hard to cleanly separate the hardware from the software without introducing extra complexity and security issues.
Looking at Linux and all the devices it powers (including most of the internet infrastructure) - it would seem that it is possible to do pretty good security on very open software that's as separate from the hardware as can be.
Don’t conflate user freedom with just…being salty that not every product is for you.
The idea that a CPU is going to come out of reset and start executing instructions that you provide at the reset vector is thirty years out of date.
ref. https://doc.coreboot.org/northbridge/intel/haswell/mrc.bin.h...
... plus Intel's microcode.