absent real documentation,
I cannot reproduce this on my ChromeOS, and root can write to ~chronos. Maybe MLS gets stricter in newer releases.
But that’s neither here nor there, really; if you spec sudo bash -c "$(curl -L mrchromebox.tech/firmware-util.sh)" then the same thing works under ChromeOS and Linux, regardless of the working directory, and it’s smaller, and you can delete the rest of that weird block