UK cyber security officials report Huawei’s security practices are a mess
arstechnica.com
arstechnica.com
The "process" for handling vulnerabilities once they are discovered would probably be better, but i doubt the same would be true for the coding practices. These vendors have too many products and seldom each one goes its own way in regard to software.