The fundamental problem with these type of statements is that they rest largely on trust and reputation. In the case of @RobJoyce45 there’s a deep well of respect. But is that good enough?https://twitter.com/nakashimae/status/949451178110279680 …
Don't think that's the only way to judge it. While not a perfect indicator either, asking how plausible it is for TLAs to hoard such flaws is a also a good idea. In the case of spectre there's no way the NSA et al. could've efficiently protected sensitive systems despite flaw.