It's odd to me to assume that people should trust US-based supply chains. We know that the NSA has done supply chain attacks in the past[1], while in this ca

It's odd to me to assume that people should trust US-based supply chains. We know that the NSA has done supply chain attacks in the past[1], while in this case we only have allegations of China doing the same (don't get me wrong, I wouldn't be surprised if China did this, I'm just saying we have more evidence for the NSA doing it). Personally, as someone outside the US, I would gladly trust alleged Chinese malware over known NSA malware. Or even better, literally any other country outside the 5-eyes. [1]: https://www.theguardian.com/books/2014/may/12/glenn-greenwald-nsa-tampers-us-internet-routers-snowden https://www.theguardian.com/books/2014/may/12/glenn-greenwal...