What prevents a small peripheral company from being a vector for hardware attacks via a foreign state? Is there an impartial inspection process that checks devices? It seems like it would be extremely lucrative for a person to facilitate that operation if they don't value the integrity of their nation.