There are good reasons to not trust microcode. For example, a certain instruction chain can be made to trigger backdoors on the CPU and allow direct memory access for attackers. Catching this might be rather hard, though definitely not impossible.