I think they are at base #2, so don't get your hopes up.
I don't think most HN software engineering folks realize how easy it is to train script kiddies. Most of the big "cybersecurity" consultancies (yes even the big IPOed ones) are staffed by people who basically went through a bootcamp and gained a few certifications. Corporate "security" especially is more about checklists and compliance. You are not getting any real talent like the ICs' blogs that get posted here on HN. The typical staff at cybersecurity companies won't be able to subvert broken branch predictors and post networking stacks exploits on twitter. Those sort of low level application security engineers are a lot rarer and more expensive. Many of the "cybersecurity" companies provide script kiddies and consultants without a STEM background. Forget about fizzbuzz, they are closer to McKinsey than Accenture.
When has China, as a state actor, done anything as remotely as egregious as STUXNET?
Monitoring the weather = surveiling the weather = spying on the weather = spying = spying on Americans
It's a game of deranged telephone, fueled by the billion-dollar anti-China propaganda industry.
Similarly, did a Chinese OEM implement a SNMP daemon in their gear? Oh no, their literally spying on us1!11
Additionally, China has been expanding its presence and influence through strategic investments and development initiatives like the Belt and Road Initiative, which aims to create a network of infrastructure and trade routes across Asia, Africa, and Europe. This expansionist strategy has allowed China to increase its economic and political influence globally, and some experts argue that it reflects an imperialist mindset