There's no proof at this stage that a government agency is behind this. It could easily have been an employee inserting this code in an attempt to blackmail th

There's no proof at this stage that a government agency is behind this. It could easily have been an employee inserting this code in an attempt to blackmail the firm, or perhaps to gain financial advantage by learning corporate secrets that would allow them to beat the stock market. Hopefully there are source-control logs that show when this alteration was made and by whom, but given how hardware companies treat software I doubt it.