It's not completely custom - trusted elements have independent evaluations (FIPS / EAL). We think that a combination of local and centralized elements provides best security.