For all I know I've got 5G implanted, how am I to verify that? Obviously the implant will make whatever measurements I do return the wrong results.

Gotta trust something, we decided we mainly trust the OS download and the repository keys that came with it.

Anyway we seem to have been talking about different kinds of verification, like checking that what Joan Daemen and Vincent Rijmen wrote is really what your CPU is executing versus verifying that implementations of a trusted algorithm aren't broken. We're not in the conspiracy theory or incident response business, so unless someone comes with something that sounds like we should forward them to incident response, the former is not what we do.

Formal verification is a thing people do - and I think that’s what most people think from ‘verified’. They aren’t conspiracy theorists they’re proving things like that your C implementation code is defined and matches what you think you’ve written, since that’s where these errors creep in.

you can do those things under the assumption "the compiler is correct". That still very much counts as formal verification.