All software is exploitable and the machines and software aren't running verifiable open-source firmware and hardware so how could they possibly be demonstrably

All software is exploitable and the machines and software aren't running verifiable open-source firmware and hardware so how could they possibly be demonstrably secure?