https://fwupd.org/lvfs/vendors/
HP already uses this for firmware updates to keyboards and mice. Of course distros typically acquire consent before applying them.
(I wish I was kidding. https://www.logitech.com/en-us/software/logi-ai-prompt-build...)