Comment 1 for bug 1738272

/me concurs, the contents of intel-microcode is very analogous to that of linux-firmware, wherein the contents are freely redistributable but may not actually come in source form. It seems entirely reasonable to treat intel-microcode and linux-firmware in a similar manner including component. iucode-tool would follow naturally.

This should also be put on the list of packages which should routinely be kept in sync in -security as -updates.