While reasonable, this is a pretty pessimistic point of view. With X-ray images, the attacker has much less flexibility to change the hidden backdoors. You do not have to check every single machine, like no one ever checks every single line of code. It is enough if people randomly check the X-ray images and whenever someone finds anything suspicious, it will get into the news. This is how open source works.

Yes, having a state as enemy is a loosing game, but if we take every possibility to make their life harder, it will shift the game significantly. Giving up never help anyone.