Alternatively, it is not unimaginable for a foreign entity to
bribe or otherwise compromise a SolarWinds employee.
Wouldn't Google, Apple etc do background checks that discovered fake identities? Or is it not so easy with background checks?
Maybe SolarWinds would be less careful though?
I incorrectly assumed they'd try to get a fake US passport/identity.