> Do you trust your bios?

Yes, it's Coreboot with disabled and neutralized Intel ME.

> Your usb stack?

No, it's isolated in a dedicated, hardware-virtualized VM on Qubes OS.

> Your network card firmware?

Same as above. And it's FLOSS.

> surrounded by cameras and microphones

For those, I have hardware kill switches. On the phone, too.