Afaik there are companies that will ship you a pre-programmed SPI chip for most devices, for like 20 euros.

I used this one in the past http://www.bios-chip24.com/en_US but there are others too.

This is of course just as secure as getting it from some random guy on the internet (i.e. not that much).