You can build a complete pwn exploit by chaining several seemingly innocuous (more or less) vulnerabilities together just so. This vuln provides the escalation, another provides the remote execution...

Then when someone says: "Huawei pwns us", they can just claim ignorance and stupidity because a small mistake here and there provides better deniability than some whitehat finding out that Huawei provides the Chinese government with the whole set of keys to the kingdom.