I wondered about this and found the awesome https://discover.passportindex.org/security/who-prints-your-... - the US seems to be unusual in not contracting it out to De La Rue (who also do banknotes) or Gemalto (subsidiary of Thales).