I would like to introduce you to Spectre and Rowhammer.
Secure software won't protect you from insecure hardware, which also needs to be formally verified for a secure system.
Secure software won't protect you from insecure hardware, which also needs to be formally verified for a secure system.