The fact that they call it "Security made in <foo>" is what justifies the generalization. If their security was any good, they'd be explaining how and why (and how they plan to remain incapable of backdooring it), not invoking cognitive biases of innocence-by-association.