yes I agree that this looks like a good step, vendors should also probably release some tools to verify the integrity of their firmwares if possible.