Secure systems are much more than just a verified kernel or userland.

None of that matters if you are using it in a modern processor full of backdoors and malicious technologies like AMT/IME/PSP.