Reality check: if a state actor wants to add a backdoor it's easier at the parts closest to the consumer: the integrators, not the fundamental technology

Of course you could be playing the long game as well like with Dual-EC-DRBG