I'm curious about your thoughts on the threat model when a cloud provider is building and operating the silicon too, and they aren't exclusively procuring silic

I'm curious about your thoughts on the threat model when a cloud provider is building and operating the silicon too, and they aren't exclusively procuring silicon from suppliers that are the likes of Intel and AMD. Is it a particular certification that would help you trust it? A third party audit? How does it compare to how you establish trust in AMD or Intel on their design, implementation, policy, and practices?