Because they are a software project. When you're only concerning yourself with software, you have to pick some hardware and move on.

Going down the rabbit hole of secure hardware leads you down a slippery slope of eventually needing to create your own chips. And that's basically impossible these days for anybody smaller than Google or Samsung. So you do some research, pick the best you can, and hope for the best.

Perfect is the enemy of good.