“Security researchers can still get leaked content via Internet Archive or forked repositories.”
Someone dumped 4.8GB of Alder Lake firmware source on GitHub, and it sat there for a week before anyone noticed. Inside are the BootGuard key pairs, the thing meant to stop malicious firmware from booting. Open source firmware projects can’t legally touch any of it. Attackers have no such problem.