I wish that were true but it's really not. At least not within the public sector, maybe wealthier private firms can afford to do that level of verification. A

I wish that were true but it's really not. At least not within the public sector, maybe wealthier private firms can afford to do that level of verification. Anyway, even then you still need to make trust decisions. How do you verify the ICs in your HDD haven't been tampered with? How do you know the firmware wasn't built with a malicious compiler? Or that a bad actor didn't add a backdoor to the firmware? Realistically there's a lot of components in modern computers that we have no choice but to trust.