So where does the guarantee stop? At the GPU driver level? Firmware level?

What if the GPU has a custom bios flash that somehow logs the unencrypted prompts?