

chinese software is way too often shoddy quality. the state does not need to plant backdoors, because most all of their products already include them. nothing is invulnerable, true, but chinese software is just not secure at all.
for an example, just look up chinese iot devices, even popular brands like tplink. lots of unbranded and sometimes noname branded cameras use the same firmware base, connecting to the same cloud service allowing unauthenticated remote access to the devices, their networks, and arbitrary firmware updates.







that’s no question, NSO group and I think a few other commercial rootkit makers are also located there.