Which is why people who care about stuff like this use an AMD GPU, whose driver is open sourced and mainlined in the kernel.
This is not perfect since there are still BLOBs, but it does help a lot.
a few weeks ago we found a vulnerability in GNU/bash path completion feature.
The bug has already been fixed by Chet Ramey; the most used Linux distributions in productions have not been vulnerable.
Unluckily, we were not able to reach the CVE people, but since the bug has already been fixed, more than two weeks ago, we decided to publish the small report anyways.