So saw this and two things came to mind (wrt osquery) https://motherboard.vice.com/en_us/article/evpmyw/some-macos-users-arent-getting-the-firmware-security-patches-they-think-they-have

yep: https://osquery.io/schema/#platform_info