It also raises concerns about trust. What if I don't trust proprietary Windows and don't want to run it? It can potentially compromise my SSD during the update.
That's true. A good example of the difference between "scale" and consumer solutions. I can switch to Windows for that stuff and back to Linux afterwards. Doing so for a fleet of office machines is already out of the question.
Now I really have to check if I get firmware updates from Lenovo for all the hardware in my Thinkpad... I always assumed I do!
Now consider doing this at scale, in a datacenter, or just some office that has a lot of these drives. Ouch.