I present Dual_EC_DRBG as a great example of “you can’t trust shit”

But also CPUs and motherboards may be compromised too. Whether it’s by China or the US… It’s a plausible thing. Intel IME and AMD Secure Processor amongst others…