Those components in that PinePhone, they come from China. Are you sure that flash module does not contain a backdoor? What about the SoC, PinePhone uses Rockchi

Those components in that PinePhone, they come from China. Are you sure that flash module does not contain a backdoor? What about the SoC, PinePhone uses Rockchip, the full name of that company is Fuzhou Rockchip Electronics Co., Ltd.. Are you sure the SoC is free from backdoors? Why even limit the search to complex components when a simple SMD capacitor is more than big enough to contain a low-power radio. Add some 'intelligence' and the thing will be able to deduce whether it is mounted in a position which gives it access to interesting data - the power path being a good candidate - to be transmitted on demand. The same would have been true had the components come from any other country but as it stands nearly all such components come from China.