Yes, of course you are right. My comment was meant more along the lines of "even if the software were ultimately trustworthy because of open source, thousand eyes, careful development and fairy dust, those hardware problems would still be a way in".