I would agree, it's the same as claiming testing will find all bugs in software. Some of these devices also have a lot of software. While deep analysis make it

I would agree, it's the same as claiming testing will find all bugs in software. Some of these devices also have a lot of software. While deep analysis make it harder to hide things. Analysis does not forgo the possibility for exploits or back-doors to exist. Why do you think there are people who wish Intel would sell a CPU without IME, and what have we learned from Meltdown and Spectre is that finding all exploit avenues is tough. Moreover, most software does not have proofs to ensure correctness ect. Silicon designs are tend to have more verification done, but bugs still exist. Look at any errata sheet for a device. However, this generally applies to all software and hardware. I guess the big question is there a possibility of innocuous back-doors vs your run of the mill exploitable bug.