@nem it was decade+ ago when I've been looking at DIMM 1.02 firmware disassembly, so I can't remember details...
but, in theory, if DIMM<->NAOMI interface have commands like POKE/PEEK to DIMM RAM - it might be possible to upload some our code there and patch DIMM firmware in RAM to make it run.
there is still the problem with "BIOS CRC protection" at hardware level, which blocks G1 bus access (i.e. DIMM/cart in Naomi or GD-drive in Dreamcast),
so fully custom BIOSes would be unable to access DIMM...
but I think this can be avoided using magic 1KB boot chunk from Naomi