Designing a secure platform is possible within the EU[1].

[1]They need to use US EDA tools, And manufacture masks but maybe there are tricks they won't need to trust them - like inspecting critical parts of the masks.