You aren’t supposed to do serious work over these things. They should be a last resort imo.

Thats true, but that sadly won’t help against a state forcing a company to put these things into the silicon. Not saying they do rn, but its a real possibility.

I mean can’t they just audit a version that doesn’t have a backdoor/snoops. Verifying against silicon is probably very hard.

How do you want to verify a RISC core not doing something funny?

How do you want to federate Petabytes or even Exabytes of content? And your second sentence leads to a monolithic instance.