Is it even possible to have a known-good machine? If we're potentially dealing with state actors here, the entire supply chain could be compromised, so even machines fresh out the factory might have backdoors.