A long way of saying: have the vendor hold keys for everyone's device, and hope they do it well; use embedded fuses to make the contents immutable when the vendor key is employed.

I think the real disagreement between privacy enthusiasts and statists, is mostly a political one, over a right to real security, not a disagreement over whether a backdoor can be implemented effectively.