Wouldn't be surprised if every secure element is backdoored by at the least the state actor of the country either fabbing the product or where the firmware is built.