The vulnerabilities they found are laughable. Even with all of them fixed, what about infected disk firmware, compromised Intel Management Engine (or the AMD equivalent), or a subverted compiler [1]? On the system itself, or on a developer's machine.<p>And suppose you somehow fix all of that, and run it on a mathematically verified secure chip. How do you know vulnerabilities weren't inserted into the silicon, or perhaps the whole chip was swapped with a compromised one when you weren't looking. There's already been reports of factory compromised hardware for credit card readers.<p>With control of the entire USA as the prize, you can bet that's the level of attack you'll be dealing with.<p>[1] <a href="https://www.win.tue.nl/~aeb/linux/hh/thompson/trust.html" rel="nofollow">https://www.win.tue.nl/~aeb/linux/hh/thompson/trust.html</a>