The moment you don't build your own device, TEE with provable encrypted executions or FHE is the only way to run reasonably secure apps.