Trustworthy in the context of a "secure as possible" open-source design. Knowing that the layout I shipped is what I got back with no modifications.

Unfortunately my idea would have both the layout and the (OTP-fused) firmware fully open. I'm learning a lot about the challenges of "transparent security" as opposed to security by obscurity...