Hacker News Reader

Is there a point to running verified code on insecure hardware?

If you verify that it does no funny business with the hardware bugs it should be no problem, right?

I figure comprimising alien/userland code could well be an issue, something like Javascript in a browser.

I assumed that the GP included userland, and the browser, when they advised only to run trusted code.