You can just have a bunch of notes and vote out bad results. You can say "how do you know that 20 different machines you run that do not have hardware backdoor but how do you know software running ethereum is not backdoored ? There is no protection for the compute engine being backdoored, just the fact you'd need to get that backdoored software to most nodes.