And, after certification, they added added a non-free repository: https://puri.sm/posts/purism-patches-meltdown-and-spectre-variant-2-both-included-in-all-new-librem-...

I wonder how this is going to go down...