In fact, governments probably should only EVER deploy executables they have built themselves, using their own compilers (see the classic computer science paper Reflections on Trusting Trust).
You’d also need chip #microcode auditing and verification for security-critical systems. And some level of chip assurance. And Cell-like audits… Details to be determined