From random articles I once read (i.e. hardly authoritative) the US TLAs focused heavily on intercepting packages in transit, modifying them, then forwarding them on rather than rooting the entire production line. But obviously that's just the stuff that was publicized.