Also considering the layers of hardware with layers of firmware. ... I should probabbly learn something about that too....

I'm thinking along the lines of google's blog on Meltdown and Spectre recently that basically said if two things are on the same processor.... there's nothing you can do now security wise and be sure about it.

That's why there's been so much work on reproducible builds.