Everything here is my opinion. I do not speak for your employer.
You've got to be kidding me. Supposedly legit BIOS extension, included by the manufacturer in many laptops, hijacks Windows boot process then updates itself using non-encrypted HTTP.
I didn't like non-open-source firmware before, but... honestly.
Try my project! Tailscale: a new, magically easy mesh VPN based on WireGuard.