Buying your hardware wallet from random 3rd party no-name distributors in China is kinda asking for trouble, isn't it?
The difference is that the western attackers go free, whilst the Chinese attackers will very likely be executed.
(Hagelin) Crypto AG.