[catlikesshrimp]

But flashdrives can be tampered with. What about a live cd / dvd / bluray? You would need to compromise the BIOS / UEFI to affect the OS.

(No, I won't suggest carrying the BIOS chip around)