I assume there are spies working in all different companies, governments don't even need to officially tap into those companies. What the private companies can do is to strength their security, and make sure it cannot happen easily.