Given that lots of people are reporting very similar compromises, traced back to a confirmed supply chain compromise, with similar TTPs and a uniformly very hig

Given that lots of people are reporting very similar compromises, traced back to a confirmed supply chain compromise, with similar TTPs and a uniformly very high level of tradecraft sophistication, I'd say the former. And that statement is how.