Joanna has proposed a model where we minimize the trust we put in x86 with a peripheral. Seems like a plausible path forward to me.

http://blog.invisiblethings.org/2015/12/23/state_harmful.htm...