As you mention this is a hard problem. Perhaps there’s some way to create a hardware equivalent of a checksum. I imagine for the foreseeable future it’s going to come down to how much you trust the vendor. One point to note is that there are only a handful of foundries capable of producing advanced chips anyways.