Kaspersky took the US allegations very seriously, and moved all of their data collection and processing for the US (and quite a few other nations) to Switzerland. [1] They then made the facilities accessible to US and other "partners" to inspect the code at said facilities, compile it from source (to compare distributed binaries), audit their data handling/processing procedures, and so on.

It'd be pretty easy to see if the software was missing Russian state malware both by inspecting the code, or simply installing it on a test machine and then running the scan. If this were the case, it's highly likely the news would be repeating it 24/7. So it seems safe to assume it's doing its job well.

[1] - https://www.kaspersky.com/about/press-releases/2020_kaspersk...

On the flipside, Microsoft will upload your confidential files to accidentally NSA-controlled servers and accidentally miss US state malware.

that's something you still have to prove.

also, it's not like the american-based companies will not do that with european data to america. :D