A long way of saying: have the vendor hold keys for everyone's device, and hope they do it well; use embedded fuses to make the contents immutable when the vendor key is employed.
I think the real disagreement between privacy enthusiasts and statists, is mostly a political one, over a right to real security, not a disagreement over whether a backdoor can be implemented effectively.
Great article on a very touchy subject. While I doubt Ray's engineering PoC will ever be utilized, at least someone is attempting to quiet both sides of the argument with a seemingly valid approach to privacy and security.
I would love to hear more about Tromer's exploit. Anyone aware of where I can find more about it?