Another important piece is being able to verify that the manufactured hardware meets the open specs they claim to (and wasn't tampered with, or contain errors).

Another important piece is being able to verify that the manufactured hardware meets the open specs they claim to (and wasn't tampered with, or contain errors). Something like an md5 check for hardware. With open software you can read the code, compile it and run it << zero trust. With hardware you can read the spec, but must trust the implementation.