What are the ways in which this microcode update is enforced? Is it something that ships with your os? or something that user has to manually install like a BIOS update?
I know some recent Intel parts can't even run the EFI firmware without first getting a microcode update, but is Skylake like this too or can the EFI bootloader run without first getting microcode downloaded?