And what about all the blackbox IP that get added after you design your functionality. There could be absolutely anything in that test logic added by the vendor

And what about all the blackbox IP that get added after you design your functionality. There could be absolutely anything in that test logic added by the vendor, anything in that random 'process measurement' cell added by the fab. I don't see how the verification required is remotely possible.