Ask HN: How to avoid USB firmware attacks

I'm aware of USB firmware attacks where a bad actor will leave a stray USB around with the hope of a target using it and compromising their computer.

This basically can be avoided by not plugging in a USB stick you don't own. But what precautions can one take when buying a USB device on a website like amazon?

It's not beyond the realm of possibilities that a potential attack target could be to pre-package USB devices with malicious firmware and sell or re-sell on a site like Amazon.

Is this is known attack vector, and is there anything one could do to prevent something like this?