Given the embarrassingly bad security practices of hardware vendors (see recent secure boot key leak) do the spy agencies require deliberate backdoors anymore?

Given the embarrassingly bad security practices of hardware vendors (see recent secure boot key leak) do the spy agencies require deliberate backdoors anymore? I have lost count of the number of times Cisco has shipped a hardcoded admin password.