If the 'goal' of this policy is, as postulated elsewhere in the thread, to allow physical access to devices in order to deliver malware, etc., then how would yo

If the 'goal' of this policy is, as postulated elsewhere in the thread, to allow physical access to devices in order to deliver malware, etc., then how would you know your wiped device hadn't acquired a bootkit along the way? Using a parcel-handling service, gov't or private, along with some tamper-indication of the package interior seems much safer, though not perfect by any means.