This argument of "trust no one, not even the sysadmin you employ" is actually "trust no one except me and this black box I'd like to sell you". Even ignoring the externalities of this kind of push I don't really see the value.