I think it is more valuable for the attackers to have exfiltrated their code and analyze it for vulnerabilities. Adding some malicious code to the BIG-IP softw

I think it is more valuable for the attackers to have exfiltrated their code and analyze it for vulnerabilities. Adding some malicious code to the BIG-IP software would require a long time for the attackers to persist in f5's systems undetected until they understood the current code. Not a zero percent chance, but pretty unlikely.