Personally I wouldn't be surprised if there was a backdoor of some sort in the firmware or deniable known vulnerabilities to exploit but just a spy chip seems too Hollywood and symbolic given other approaches - adding a 'parasite' to corrupt it when they can just integrate it such that a very expensive and detailed analysis would be needed to find it.