which have all likely been vetted-
“Vetted?”
Is that a technical term?
Is there a standardized protocol involved?
Who did this “vetting?”
So much for your “vetting.”
https://www.google.com/search?q=chinese+firmware+compromised&ie=utf-8&oe=utf-8&client=firefox-b-1
Fact is, you are at the mercy of Chinese software whether you choose to admit it or stick your head in the sand and say you aren’t.