FYI, the RK3588 requires proprietary binary firmware blobs for (1) DDR initialisation in the bootloader and (2) the GPU. The RK3588 has Valhall gen 3 Mali GPU which now requires a firmware blob whereas earlier Mali versions didn’t.
The most recent SoC which can be used without proprietary blobs is the Rockchip RK3399.