While this is focused on hardware and physical access, it would seem that it's the same for software. You don't know if someone has control over it remotely, t

While this is focused on hardware and physical access, it would seem that it's the same for software. You don't know if someone has control over it remotely, through any number of means (browser, downloaded software, installed professional software with backdoors, software with unreleased vulnerabilities, etc.). Even airgapped machines can be compromised (Stuxnet, TEMPEST). Even if you built all the binaries from scratch from the official repos, you'd still be at risk of security bugs like heartbleed, or a compromised compiler. In the end, I think security is always a numbers game. Someone can always get to your protected resources, it's just a matter of how much the attacker wants it. It's easier to attack a resource than defend it. https://en.wikipedia.org/wiki/Stuxnet https://en.wikipedia.org/wiki/Stuxnet https://en.wikipedia.org/wiki/Tempest_(codename) https://en.wikipedia.org/wiki/Tempest_(codename) https://en.wikipedia.org/wiki/Heartbleed https://en.wikipedia.org/wiki/Heartbleed