I've definitely gotten private keys and full configs from Cisco and Arista gear that hadn't been properly wiped. What's annoying about Arista is that while they

I've definitely gotten private keys and full configs from Cisco and Arista gear that hadn't been properly wiped. What's annoying about Arista is that while they don't post EOS versions for download, they don't even post SHA sums. It would be super easy to buy, backdoor, and resell Arista gear without any way for an end user to verify their EOS version.