You might be right and in any case the new boss is better than the old boss right? Then again maybe this is just the honeymoon period which bluesky soaks up as many users as it can before the enshittification begins to start wringing profit out of the enterprise? Time will te if the hate is justified or just sour grapes.
You are talking about the boot loader, but even that is pretty standard. There could be hardware exploits in place, sure, but we are mostly talking about a very low margin product and the volume of data that you’d need to retrieve and process to sift out anything useful would be massive and obvious so in general I think this is mostly conspiracy level thinking. Any shenanigans is going to be done in small targeted batches if it’s done at all to try to infiltrate specific targets and reduce risk of some curious researcher or enthusiast accidentally stumbling across it and ruining it.