Yes, but active attacks where a third-party can switch on-and-off features on your CPU are obviously vastly different from a passive attack such as a compromise

Yes, but active attacks where a third-party can switch on-and-off features on your CPU are obviously vastly different from a passive attack such as a compromised random number source. The RNG attack suggested can pass verifiability while at the exact same time introduce a backdoor and thus constantly be on.