

Well it is true hardware implants and hardware replacements can’t be fixed by flashing but they are detectable and they can only deploy so many of those before everything is a major news story and if you feel that the odds are that high, making one’s own hardware is an option but generally not a good one.
Never Oracle
PostgreSQL is fine (or any fsf licensed Database is acceptable)