But my point is you also have to trust that your underlying OS, or chipset, or even some other software on your computer doesn't have some way to thwart the ent

But my point is you also have to trust that your underlying OS, or chipset, or even some other software on your computer doesn't have some way to thwart the entire effort. If the thing you're using the do your verification is itself compromised, then you're just as screwed.