I get that, but expecting absolutely everything to be open-source and accepting no substitutes is wildly unrealistic, not to mention that's an entirely different use case where stuff is reasonably expected to be secure and thus is usually vetted to be open-source.
no. i expect everything to be free software, that means free as in freedom.
just think about it and realize what kind of a fucking dystopian world we live in where someone else can give our slaves instructions for what to do, and even tell them to actively harm, enslave, backstab, etc... their masters
it's not far fetched at all because computers are (or at least were meant to be) digital slaves for their users, but with proprietary software you become the slave, while the computer becomes the whip used by your jewish massa.
i'm living proof for using only free software being completely possible, even if it means that you have to use 12 year old server boards with 16 CPU cores and 64 gigs of 1600MHz ECC RAM while sucking 600 of power 24/7
i'm talking about the ASUS KCMA-D8 for example here, the KGPE-D16 can take 32 (or i think 64?) CPU cores and 128-256GiB of RAM, it's just a KCMA-D8 but a bit better, and each one of them costs around 200-300$ each including RAM, CPUs, a cheap PSU, and some duct tape because i was too lazy to find a chassis that could fit the weird EATX-like +1cm form factor.
along with that, throw in a GTX 780ti and you have a nice workstation, or just use a 20$ thinkpad.
all of the things i listed obviously support coreboot/libreboot without binary blobs, but you will have to keep things like CPU models on the server boards and wifi cards in the thinkpads (as well as GPUs, soundcards, ethernet controllers, etc...) in mind to make sure that everything works with free software.
tl;dr, GTX 780ti, soundblaster audigy 4, opteron 4284 (x2), some 8GiB 1600MHz ECC ram that's confirmed to work well with coreboot memory init (or just working with the board in general, the chance is 90% that it will work fine with coreboot as well if you don't pick weird chinesium crap)
throw this into a KCMA-D8
or get a thinkpad X200, clean up the thermal paste and replace it, clean up the dust, replace the (g)intel(e) wifi card with an ath9k (ideally AR9382) one, throw in a new SSD and 8GiB (2x4) of RAM (the right one, specifically 2Rx

, and maybe get a new battery if your old one is dead.
if you want to, you can get a dock and use it as a desktop hybrid like one of those wintendo snitch game consoles, that's what i'm doing btw.
you could also throw in an expresscard to usb or m.2 adapter to get 2/3 more USB 3.0 ports or another SSD (you could use the SATA port for a big hard drive and the SSD as boot drive), maxing out your thinkpad.
of course, don't forget to compile and install coreboot or libreboot (without blobs), you need an SPI flasher (e.g. raspberry pi pico, ch341a, any other raspberry pi, etc..) to initially install it thanks to israel (((write protecting))) the intel ME region if your bios chip to prevent you from removing it.
remember kids: intel inside, means israel inside; and intelligence agencies inside.
Reminder that the XZ backdoor was discovered by pure luck, and one of the things found is that the GitHub source code didn't actually completely match what the program did. So there were functions that were hidden from the publically available source code for XZ that was included in the application files that get downloaded by the OS.
I would like to hope you can understand the implications of that.
it wasn't luck, it was a random guy who - like every other sysadmin or security researcher and a lot of other people - just looks at what happens on his system once in a while, and saw that something wasn't right. i recommend everyone to do the same and watch what actually happens, because you never know what could happen while you're not looking.