If you're worried, you should probably upgrade your suspicion of all software, not just Russian-made software. The fact that it's made in Russia should not mat

If you're worried, you should probably upgrade your suspicion of all software, not just Russian-made software. The fact that it's made in Russia should not matter much: You should audit the code, compartment it from the rest of your system (e.g. with virtualization), or not run the software. You're right to be worried about what software you run, but Russia is not necessarily the most relevant threat actor. Take this as an opportunity to develop your threat model and apply mitigations where sensible.