They seem to make a special case of modules by those brands, for example 4G or 5G modems that are contained in other manufacturers appliances, and these days employ self contained operating systems in theory perfectly capable of moving information back and forth without any intervention, or even knowledge, from the device employing them (cellphone, IoT device, industrial appliance, vehicle etc). The problem is: how do they certify them without obtaining the firmware source code along all the original design data?