Please find my reply here: https://forum.qubes-os.org/t/how-can-we-ever-trust-our-hardware-supply-chain-attack/2846/6?u=sven