Firmware is not OS.

Your machine is a distributed system. The firmware is what runs a specific node.

Yes they usually have DMA, shared busses, etc. That's an implementation detail.

An implementation detail where TLAs could theoretically get root remotely? Seems like a bit more than a detail to be glossed over.