I cannot think of any sovereign power that wouldn't.

The Feds run key hardware through third parties to detect counterfeit hardware. The “new” thing is the targeting of devices headed for commercial customers.

The US's NSA would want and probably does have such a thing.

The Chinese government would like to have almost-complete control. The Chinese government publicly says it has high levels of control.

But when they can't effectively regulate their medical (mass HIV infection from blood plasma needle reuse), food (tainted milk), or chemical (unlicensed mass CFC production) industries... reality seems to differ.

Companies in China (especially those in the tech sector) have to keep close ties to the government, and most of their leaders are members are of the party. You don't GET to be a multi-billion dollar tech company* in China without toeing the party line [1] [2] [3]

The issues around regulating food safety and vaccines that you mentioned are irrelevant.

* Foreign companies must operate Chinese subsidiaries to run their operations in China.

[1] https://www.wsj.com/articles/beijing-pushes-for-a-direct-han...

[2] https://qz.com/1102948/chinas-communist-party-is-all-in-on-t...

[3] http://chinamediaproject.org/2018/05/02/tech-firms-tilt-towa...

Everything you say seems to be valid for Chinese companies. Which SuperMicro... isn't.

If they want to start auditing their incoming supply from China more closely, or even shift production elsewhere, there's nothing except cost stopping them from doing so.

And the rub is that any competitor also using Chinese supply (for cost savings) is vulnerable to the same attack. SuperMicro was presumably targeted because of their size and global customers.

As having worked for a subsidiary of a large multinational company in China, I can tell you that a lot goes on that you might find surprising. Middle management and those involved with establishing the deals with subcontractors would often have arrangements to make money through various means, such as through IP transfer or property theft. The subcontractors themselves are Chinese companies.

At our place a lot of shady things were going on and were, thankfully, found after a number of years. The global HQ had to step in and fire around 1/3 of employees working at the China branch.

Now, there is no reason to suggest that this was related to any government policy or request. But it should be clear by now that the CPC are not exactly opposed to shady things happening to foreign companies. My point is that this is an an environment where something like this can happen quite easily, especially when a lot of technology companies have close ties to the state.

Big difference, which is parent's point.