Ah, I didn't realize this was about firmware in ROM (as you admittedly clearly say in the post). I thought this was about drivers uploading firmware to a card.
Then I wonder about how such a check can possibly be implemented. As far as I can tell, there is no standard way for a computer to request a device to send its firmware, and no enforceable way to prevent a card responding with something other than its true firmware.
Re: Signing the firmware
Then I wonder about how such a check can possibly be implemented. As far as I can tell, there is no standard way for a computer to request a device to send its firmware, and no enforceable way to prevent a card responding with something other than its true firmware.