Wouldn't be surprising if they got hardware backdoors in a bunch of the common semiconductors. Who could find out if Intel Management Engine or AMD equivalent was doing something sus. If I were the CIA/NSA I'd definitely be thinking of ways to repeat and surpass the Crypto AG success story.