Comment by rmbyrro

I think the most likely outcome here is that all these devices were intercepted from the same firm.

With enough time, effort, and money? Sure.

But that would be many orders of magnitude more difficult that what they pulled off here, which was already very impressively difficult to pull off.