At this point what makes us think all major contributors are not on a payroll of one or the other state agency? The attack surface of the whole SW supply chain is huge.
Will be interesting to see how Intel recovers if at all. Actually, is there today (or since 1 or 2 years) any reason to go with Intel on desktop or server?
This is a trend not only among banks but more and more among big tech - just include the (future) fine into your product price, then settle (if they investigate at all). No harm, nobody goes to prison, everybody happy.