Simple (and good policy). Defends against unknown attacks like additional circuits hidden in the ram and so on.