we can assume this also exists in SFP devices aswell. SFP's are relatively simple devices with room to spare, especially for a nation-state actor. The issue is

we can assume this also exists in SFP devices aswell. SFP's are relatively simple devices with room to spare, especially for a nation-state actor. The issue is this is completely undetectable.