The biggest threat to China's IT security isn't Windows (as bad as it is), but rather the rampant software piracy. Anyone who thinks that the NSA, and any other state actor, can't sneak malicious code into software which is distributed in a black market is kidding themselves.