I'm not sure that's right.

I'm not an expert, but I think that the firmware is only responsible for the physical touch, means sending and receiving packets, and doing exactly what the driver tells it to do.
I've seen many wifi PC chipsets that supported injection and promiscuous mode only after patching the driver, and I believe that's what we are dealing with here.

Considering that maemo is fully open source, I guess it shouldn't be too hard.