There 2 way to update the intel microcode: BLOB
- We can update the Microcode by the Operating System like binary microcode.deb but Purism can NOT include this microcode.deb because Intel Microcode is a dirty propietary packages.
All intel computers require microcode either by the operating system or by the bios to work the CPU, in most cases the microcode works as a signature to start the cpu, if the microcode is new it is updated into the cpu only one time and later only keeps the signature every time you turn on the machine.
Intel CPUs should work without Microcode, but they violate the freedom of people who buy their Intel products, people should not buy Intel CPUs for this reason and others. - We can update the Intel Microcode by Bios like Coreboot, so Purism it uses this way to update the Microcode because in this way, Pure Operating System can be fully Free Software without including the Intel BLOB Microcode onto Pure. If you want the last new Microcode for L14 you need wait for the incoming Purism Coreboot 4.17 it around the corner to be released.
Also you can manually update the Microcode any time on Coreboot.
I would like delete the whole ME on Bios to remove Microcode on Bios and OS too. I not need it.