Thank god for readily available horse ulcer medication being legal to mail in bulk quantities into the impacted area…

That was already solved by DDC and live-bootstrap

https://github.com/fosslinux/live-bootstrap

https://dwheeler.com/trusting-trust/

Firmware and microcode are just software unless you are talking about a Nexus Intruder Program style attack; in which case you are fucked even if you solder your own hardware. You’ll need to figure out how to bootstrap your own lithography without using any existing computers, as they could be subtly subverting any hardware that you made. (This was the ultimate weapon against Soviet computers after all)

If you bootstrap your software from source code and use white listing at the kernel level and in your interpreters. Then there is no place where spyware could exist and run.

So weak, libreboot or gtfo