If they put this much effort into planting some backdoor that's going to get burned the second it's used or spotted in the openly published source code they can have it
They are building the supply chain. Who knows who the targets will eventually be; never everyone.