diff --git a/config/default.nix b/config/default.nix
index bbbc2646..478029b0 100644
--- a/config/default.nix
+++ b/config/default.nix
@@ -33,7 +33,7 @@ lib.mkMerge [
       ];
     };
 
-    hardware.enableRedistributableFirmware = true;
+    hardware.enableRedistributableFirmware = lib.mkDefault true;
 
     i18n = {
       defaultLocale = "en_US.UTF-8";
diff --git a/modules/microvm.nix b/modules/microvm.nix
index 9c8965cf..8a63c837 100644
--- a/modules/microvm.nix
+++ b/modules/microvm.nix
@@ -78,6 +78,8 @@ in
       "mitigations=off"
     ];
 
+    hardware.enableRedistributableFirmware = false;
+
     microvm = {
       hypervisor = lib.mkDefault "cloud-hypervisor";
       mem = lib.mkDefault 512;