>no data can be considered trustworthy if somebody else has been in possession of the hardware

Actually, this isn't true, given properly-implemented crypto. Or, I suppose I should say, it's true only with very low probability.