I hope I'm misreading the tails live config: it looks like binary firmware are included by default.

https://labs.riseup.net/code/projects/tails/repository/revisions/stable/entry/config/chroot_apt/preferences#L17

Filed https://labs.riseup.net/code/issues/12719 to clarify that

#tails #binaryblobs