If factory owners really want integrity from software-executed QA checks, they can require HQ authorization of software and config updates on factory floor equipment that is equipped for local tamper detection of control planes.