Open-ended question: if you buy a used laptop from an untrusted source, and you would like to clean it as thoroughly as possible, what is the best way to make sure all the firmware is either factory-reset or updated to a trustworthy state?