You can ensure there&#x27;s no backdoor in the machine as shipped from the manufacturer. That&#x27;s extremely important and a good thing to have, and I&#x27;m not disputing that.<p>What you&#x27;d like to do is make sure that there are no <i>further</i> backdoors, via bootkits, evil maid attacks, whatever. If I can reflash the firmware or insert myself into the boot process, who else can?