Build it yourself and verify via hash that what is on the firmware is what would get written.

However, if you're so paranoid that you think this could be a problem, you're already outside the realm of buying preassembled computers anyways. Who knows who could have tampered with it en route?

Build it yourself, using a pencil, paper, and some sort of bit-flipping raygun. You can compile C in your head, right?