[Spooky23]

You'll have a hard time finding that.

But, you'll have an easier time finding out what companies who sell services related to supply chain integrity protection and counterfeit detection. Googling about those topics and companies like Harris Corp are good places to start. If you look at what these companies do, you should be able to infer what they are protecting against.

From what I gather, the usual threat for this sort of compromise is that adversaries in the supply chain or channel either provide or inject bogus parts or equipment. This may be done for spying purposes, but most often are just ways to make a little extra money.

The alleged difference with a state-owned entity like Huawei is that the "trusted" supply chain itself is doing untrustworthy things.

[penagwin]

Depending on how you define it, I don't think Huawei is technically "state-owned", but because "communism" technically all business are owned by the PRC?

But it's not formally apart of the PRC.

Do I understand this correctly?

[Spooky23]

According to the NY Times, Huawei is owned by a holding company, which is in turn 1% owned by the CEO and 99% by the company's employee union, which is an affiliate of the Shenzhen Government Employee union.

But the union has no control, other than after-work social activity.

It's about as complex and weird as a situation can get. Spies hide in complexity.