If I could make a bet that a state actor has compromised a major hw manufacturer, I would take the bet every time.

An attacker like that would passively wait to pull the trigger.

It's scary and it's bound to happen eventually. Pagers suddenly exploded, so why can't coins suddenly move?