I've been skeptical ever since they were trying to claim the xz backdoor was from a state actor. All it took was 3 sockpuppet accounts, a lot of time and actual code contributions, something literally anybody with a computer science degree can do. Name: Jia Tan? Must be a CCP agent, never mind the fact that anybody can make their name and timezones anything...