While it may be RISC-V, that doesn’t exactly satisfy this post’s inquiriy. A CPU that uses the RISC-V instruction set may still have malicious hardware contained within it – think of the Intel managment Engine, for example.

RISC-V is just an instruction set – same idea as x86. While it is, of course, important to also have an open instuction set, that is somewhat separate from this post’s intention. I am referring to the physical manufacture of semiconductors, RISC-V, or otherwise.