So we must also demand that we be able to change the software.

For hardware, we could demand that universities get paid to look at samples of hardware to find backdoors, maybe.