@seedlingattempt
To get an idea of the kind of targeted attacks against firmware look at the zero day vulns, which have been found in use, against ARM & Qualcomm listed here https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/htmlview#
Theres links to more details
Obviously they are zero days (not patched) but they often get recycled by other attackers, particularly those working in less rich countries where folks dont have devices with latest security updates
If you look at the Android, Pixel, Samsung (etc.) Monthly … @handle