Comment 2 for bug 2003365

Ah yes, I also upgraded the firmware on my T14 G3 using the kinetic boot stack so we also have end-to-end-verification that the binary is behaving correctly aside from it being properly signed :)