I find it strange too that people (even some with more technical background) refer to a firmware as something obscure/magical. Chip technologies are so advanced today that you can run a code, that was only possible on a PC a decade or so ago, on a tiny controller. It would plainly stupid for NSA and the like to ignore such opportunity.