For the individualist thing.. If there are these concerns, OP should not be just rolling his own jank setup to do his work. There are groups that could provide him with secure hardware or validate the hardware he can get.
I checked and the h16 processor they mentioned uses an Arm a5 core for trustzone functions. There are tools to audit that.
All of this is unreasonable for a charity junk shop.