This seems to be the biggest issue - hardware locked into requiring Windows to be up to date.
MS can of course ship firmware that's independent of the OS, but knowing MS - they probably won't.
Though having a blob firmware from MS embedded into the CPU itself feels kind of weird. A better way to do it was some third party handling it or requiring that firmware to be open source for example.