Pretty much every new non-x86 CPU doesn't have updatable microcode, so that's a very x86-centric problem.

Microcode is loaded when the OS starts though right? At the very least it's not persistent.

And have been since ages, that was one of the themes regarding RISC Vs CISC design.