If I were trying to do something that I really needed to be secure-- really secure-- from companies and state actors, my instinct would be to start from Raspberry PI because I can control the software it boots from. Is that a bad idea?
I would use an "open as possible" hardware platform like those from Bunnie https://www.bunniestudios.com/blog/?cat=28 for example.
Novena Laptop https://www.crowdsupply.com/sutajio-kosagi/novena
Could you kindly point out a reference to this, I would love to read up on it.
https://github.com/christinaa/rpi-open-firmware/issues/37#is...
I've got several arm64 boards, and only one of them comes close to a "libre" boot. The Marvell Espressobin runs a fork of the Arm Trusted Firmware that diverged so far from mainline that after Marvell stopped working on it in 2018, it hasn't been touched, CVEs and all. The Pi actually has a chance of having a reimplemented bootloader and being used by a lot of people.