Yes, assuming some degree of security of the full TCB (both the software and hardware). Of course, no system is bulletproof, but it's slowly going in the right

Yes, assuming some degree of security of the full TCB (both the software and hardware). Of course, no system is bulletproof, but it's slowly going in the right direction - and hopefully since Spectre/Meltdown people are taking more care :) At the end of the day, it doesn't have to be perfect, just another layer in the Swiss cheese model. > able to flip one single bit (load?) somewhere inside the SoC TBH, capabilities at that level (i.e., within the SoC) are fairly difficult to pull off, so probably not in most threat models.