We need a certificate transparency type solution that makes pushing compromised firmware to individual devices impractical. That still leaves forcing manufactu

We need a certificate transparency type solution that makes pushing compromised firmware to individual devices impractical. That still leaves forcing manufacturers to insert backdoors in all devices, which as far as I know can only be made tamper evident by open sourcing (and using reproducible builds for) all security critical software and hardware.