Yup, "trusted computing base" is classic concept that we've forgotten

Or we pay lip service to, but don't use in practice