No reason that they can't just go 'oh we didn't sell those books, we should clean up all that unauthorized content' at some point in the future.
On our personal devices? That's illegal where I am and I doubt they even have the capability to do that currently, anyway
Or custom non-connected firmware
Just don't connect to the Internet and use Calibre to manage your library, there's no need for custom firmware