For me it's IRRELEVANT in the report is true or not, the very relevant part is that today's hw is complex enough to be a black box for 99% of buyers so it pose a super-serious security risk. Strong article from publicly known sources are a way to shed the light on such ignored enormous security threat.

The sole solution IMVHO is IMPOSE open hardware and free software by law. We simply can't have our society "nervous system" run on black boxes. It doesn't matter if the rouge in charge is China, USA, a specific vendor or someone else. Our banks, our states, our hospitals, ... relay on such connected black boxes. We also need to re-transfer knowledge from big corporate to PUBLIC, well founded, universities to AVOID dangerous evolution paths like actual IT evolution.