It’s all the same problem that Ken Thompson identified in his classic Turing lecture: there is no way to reliably identify Trojans.