Stories like this one from @arstechnica are not unusual:
https://arstechnica.com/information-technology/2019/06/google-confirms-2017-supply-chain-attack-that-sneaked-backdoor-on-android-devices/
That's why Purism takes the digital supply chain so seriously. Read about our efforts to protect the digital supply chain here:
https://puri.sm/posts/protecting-the-digital-supply-chain/
@purism Can't imagine how many backdoors are out there that we just don't know about. Another reason I'm looking forward to getting my hands on the Librem phone and making it my daily driver.
Backend developer in Hiroshima