Hi Alexandre, I thought about it some more, and I've changed my mind on one point: I've decided that for future kernel updates, in order to eliminate the risk of unintentionally allowing blobs into Guix, I will either wait for Linux-libre to publish updated deblob scripts, or else I will manually check for new blobs.
Thanks, Mark