This problem is why the Precursor device is so interesting because it tries to make it self easier to audit and then allow software and cryptography determine how your device works.

I am guessing for secure applications the approach of the precursor is going to become very common.