[kurisukun]

In a way, the system does not guarantee there is no kleptographic attack either since the CPU acts like a black-box device

[nullc]

True enough, though the AES DRBG output based HWRNGs would be a great target-- a highly specific nobus or near nobus attack with just a dopant change breaking a single gate... and then the RNG is just some fixed AES stream known to the attacker.