But it is still possible that DHS is just not aware of CIA/NSA discoveries and activities.

There were suspicious events that signal that something is up, like when Apple completely switched from Supermicro to other vendors or when they started to develop processes to prevent supply chain hardware attack around time when CIA supposedly found the bug (2015-2016).

iPhone is also switched from Qualcomm modem to US designed and fabricated by Intel.