Some of them have ARM TrustZone.

I'm pretty sure that i.MX6 chips are relatively clean. Modern chips are becoming less so.