Yes, but active attacks where a third-party can switch on-and-off features on your CPU are obviously vastly different from a passive attack such as a compromised random number source.

The RNG attack suggested can pass verifiability while at the exact same time introduce a backdoor and thus constantly be on.