It's not as technically difficult as it seems - see this discssion somewhere else in the thread. Definitely no crooked supply chain needed, except for the "don't ask, don't tell" mindset.

http://news.ycombinator.com/item?id=2419303