&gt; can only run code they wrote themselves<p>They of course can&#x27;t use compilers either [1] and have to write the machine code by hand. Now if you consider the CPU&#x27;s microcode as general code as well which can be updated, what is he to do now?<p>So I agree, you need trust, and the less parties you need to trust, the less chance of getting bit.<p>[1]: <a href="http:&#x2F;&#x2F;c2.com&#x2F;cgi&#x2F;wiki?TheKenThompsonHack" rel="nofollow">http:&#x2F;&#x2F;c2.com&#x2F;cgi&#x2F;wiki?TheKenThompsonHack</a>