> How many people are qualified to "verify there's no backdoor to your CPU"? More than the manufacturer, if it's open, and that's the point. The manufacturer

> How many people are qualified to "verify there's no backdoor to your CPU"? More than the manufacturer, if it's open, and that's the point. The manufacturer has an interest or can be pressured into having an interest in keeping backdoors secret. The point is not that every user will themselves audit the firmware, the point is that everyone in principle could either learn to do it themselves or hire someone with the neccessary knowledge to do the audit for them. Food safety also isn't achieved by having everyone test their food in their own labs, but by anyone being able to hire a lab of their choice to do tests they want to have done. > Allowing the end-user to modify the firmware at all also allows malicious actors to do the same. And allowing the end-user to swap out the lock to their house also allows malicious actors to do the same? Just because you can swap out a flash chip on your mainboard, doesn't mean anyone can come into your house and do the same.