It is possible to build a device where the modem is not at all trusted, but I don't know if anyone is actually doing that.