Tracing the Supply Chain Attack on Android

Supply chain integrity has always been a problem in China.

I'm surprised it has taken this long to actually have an issue that reaches the public relations level.

It's worth noting that while the affected phones run Android and Google has officially commented on this, the affected phones don't appear to be Pixel or Nexus phones or anything like that. I got the impression that the affected phones were first-party models based on the first paragraph for some reason. That does not appear to be the case.

I imagine there might be more models affected. Some of the names there (such as Doogee) also act as "OEM manufacturers" where they white-label their products and sell them wholesale, internationally, with different branding.

If you look on Quora for any questions related to the current trade war, the "experts" are all in unison blaming it completely on US being somehow afraid of China and Chinese tech, while China being completely innocent and nice.