[ansible]

... where the second property is of utmost importance to be confident that there aren't low level backdoors giving bias to your crypto keys and nonces.

If there are backdoors in modern processors, it is likely located in the on-chip firmware for the boot sequence and/or in the secure key store. Those are the two main areas I'd worry about, and I'd also keep a close eye on any binary blobs needed for the secondary processors cores on a modern SoC. And also the firmware for the WLAN chip.