It could be something beyond his control.
Remember that there are cpu design flaws that cause serious vulnerabilities and timing attacks. Intel has failed to provide patches for zero day exploits that we know about. So if pre-2018 cpu on server, screwed and you know how. If post cpu - probably screwed and you don't know how cause the NSA isn't revealing required hardware back doors.