They might have been thinking of the recently discovered hardware backdoor issue, CVE-2023-38606 (see also Operation Triangulation). There was surprisingly little reporting on it.

Discussion: https://news.ycombinator.com/item?id=38783112

Transcript of Security Now podcast episode discussing the issue: https://www.grc.com/sn/sn-955.htm