I believe this presentation will answer some of your questions and shock you
https://www.blackhat.com/html/bh-us-12/bh-us-12-briefings.html#Brossard
> Can the firmware on a hard drive, or any other hardware firmware initiate
fx keylogging and spying on files?
Yes.
> If the https://www.crowdsupply.com/purism/librem-laptop gets fsf approval,
then it will have to do without a hard drive, because the hard drive may
compromise the computer as such?
No. There is already one laptop with fsf recommendation and it comes with a
hard disk. https://www.fsf.org/resources/hw/endorsement/respects-your-freedom
Of course having free firmware for the hard disk would be ideal. I don't
think such a thing exists now.