> Who says the hardware doesn't have a separate IC overriding the ostensibly clean firmware?

Cost, space on the PCB or on the die, additional complexity, and it's a very big thing to keep secret.

And if it's found it becomes impossible to deny or chalk up as an innocent mistake.