I'm skeptical as well since I don't believe the CIA or NSA even use such tools. Don't they just use RHEL or Windows? Why would they backdoor their own stuff?