This doesn't sound targeted: by manipulating Xcode, the spies could compromise the devices and private data of anyone with apps made by a poisoned developer —

This doesn't sound targeted: by manipulating Xcode, the spies could compromise the devices and private data of anyone with apps made by a poisoned developer — potentially millions of people ... The focus of the security researchers, as described at the CIA conferences, was to target the GID key, which Apple implants on all devices that use the same processors. [...] So, if intelligence agencies extract the GID key, it means they have information useful to compromising any device containing that key.