So here's the thing: Any company that solves this problem is by definition a (most likely unintentional) honeypot. Which is about as unhelpful as you can get. The question is what can these companies do to mitigate that risk for their clients.
Expecting someone who needs/wants this sort of security in a laptop to homebrew it is unrealistic. So by your logic everyone should just despair and be completely paralyzed by their inability to protect themselves. Surely there is a better way?
That company is more likely to be a honeypot if it's a profit-motivated, US corporation who can insert a deniable software flaw. There were many such companies in the Snowden leaks.
Im not worried about Purism outside same failures everyone else has. More likely to screw us by accident than anything.
I'm not worried about Purism doing something malicious to their customers; if anything, per the original comment in this thread I'd expect NSA to simply intercept all the shipments en-route and backdoor them, just like they did with other laptops in the past.
It was apparent that they are very selective about stuff like that. You have to be a target of significant value. They could use this attack against specific buyers but I doubt they'll compromise all of them. Risk vs reward.
Expecting someone who needs/wants this sort of security in a laptop to homebrew it is unrealistic. So by your logic everyone should just despair and be completely paralyzed by their inability to protect themselves. Surely there is a better way?