Yes, the assertion that “the authors of the spying programs must have had access to the proprietary source code” of the drives' firmware is dubious. Surely Kasp

Yes, the assertion that “the authors of the spying programs must have had access to the proprietary source code” of the drives' firmware is dubious. Surely Kaspersky know better; they no doubt regularly deal with malware for which they do not have source.