Did you look at the precursor? They explicit address user verification of the hardware, right down to using simplified translucent PCBs for the keyboard etc. so you can see it hasn’t been tampered, and using an FPGA for the CPU so you know what the processor is doing.