And I’m sure they gave the gubment the keys.
I don’t know if that it would be possible in this case. The security engine is built into the chip, but that engine is individually keyed at a later date only if the end user chooses to activate it. It’s at that point that its code gets assigned. But it could well have a backdoor built in.