I think that the most severe vulnerabilities that are found have been known about for a long time by our intelligence community and likely others.

I doubt much of anything off the shelf for companies even if they open their wallets a lot can be realistically expected to defeat against advanced well funded nation state intrusions.

I would not add North Korea or Iran to that list. I think they are far behind. Maybe North Korea gets some scarps from China

The US has without a doubt the most powerful position. All major operating systems are made here. GitHub is for the most part here. A lot of equipment comes from there or at least in warehouses or just pass through. Given ample opportunities for modification. We have the FAANG. Twitter and lots of other worldwide platforms that have millions of users. All slurped Up by the NSA (at least if they want to).

The US has a very coveted position.

Presumably China possibly is next. So much manufacturing happens there on whole equipment or parts for it. Should give them rich opportunity to modify products they are interested inn.