State-level actors have been know to fiddle with firmware, specifically in the past for hard drives:
* https://www.sciencedirect.com/science/article/abs/pii/S13534...
* https://www.wired.com/2015/02/nsa-firmware-hacking/
I could see how cameras and microphones could be enticing targets.
I have no way of interrogating some GPU firmware.