I believe them, but the process is hard to check. How do we verify that they don’t have the sensor burn in a private key generated by them? (Similar to how man

I believe them, but the process is hard to check. How do we verify that they don’t have the sensor burn in a private key generated by them? (Similar to how many PGP hardware keys allow generating a private key on-device or writing your own provided key.)