What’s the difference if that open source risc is manufactured in the same Chinese plant?
You can run your RISC-V cores on an FPGA if you’re really paranoid. Of course, you’d be sacrificing performance.
Xilinx was not.
Xilinx et al. are open enough about how their chips work imo. You are not going to find something like Intel ME on an FPGA.