“Someone else who has the ability to MITM millions of users in China did it” doesn’t sound particularly plausible to me.