The only person tackling the verifiable hardware side of things seems to be Bunnie Huang with his work on the Precursor
If you're going to be militant and absolutist about things, that seems like the best place to start
And then probably updating your software incredibly slowly at a rate that can actually be reviewed
Software churn is so incredibly high that my impression is that only some core encryption algo really get scrutinized