One way this could be remediated a little bit would be if vendors for these devices were not so bent on not giving away any details and to prevent repairability

One way this could be remediated a little bit would be if vendors for these devices were not so bent on not giving away any details and to prevent repairability. If there were schematics available and devices were made to be disassembled and looked at there would be more people "auditing" devices in the field to give an alert when something is out of norm. --- A bit unrelated: The hardware attacks, I have seen one over a decade ago when working on software for credit card terminals. We started getting shipments of terminals with nefarious hardware injected. These terminals had built in fuse that could be checked to see if device was tampered with (opened). These small boards had to be added in the assembly somewhere in China and it was a problem to detect them because opening the device meant it became useless as ones with tamper flag are not allowed in production. The attackers learned to scrape some plastic from the device to make the weight match exactly. This was rather primitive attack (there was separate board of questionable quality glued inside enclosure and visibly wired to the main board) but it was rather problematic for us. I shudder to think if attackers had better hang of technology.