I don't think anything ever gives 100% security. I was simply talking about people thinking proof is needed for justification of the ban. Anyone using factory

I don't think anything ever gives 100% security. I was simply talking about people thinking proof is needed for justification of the ban. Anyone using factory shipped firmware for the entire life cycle of a device is negligent. I don't think I've had firmware functionality mismatches with Cisco/Juniper/Arista/etc gear especially since we track hashes and store images locally. You don't simply leave a gate open because the attacker can scale the walls. I don't see any reason to make it easier for the Chinese government to implant itself in our networking infrastructure. Being able to directly provide and modify Huawei's firmware sans resistance allows them far greater flexibility than what they would have attempting to compromise <insert_us_vendor>'s development resources (not that it's impossible, not even remotely saying that).