You can look at the hash of the update file. Intel publishes their microcode data files, and you can compare them. > in the case that you trust the vendor them

You can look at the hash of the update file. Intel publishes their microcode data files, and you can compare them. > in the case that you trust the vendor themselves, you have little to no way of knowing that what you have itself hasnt been modified How is this different than any other piece of software?