The issue is that any software is a blackbox when running.

There is no way for a user to know what code is running let alone verifying that a specific code is actually running on a device, combine that with a sector that keeps wanting more data.