Do we buy a HWW to enable the vendor to share the secrets out of it?

Where is the proof that they're really encrypted?

Who do they share it with and how do we know the encryption keys are not part of the package?