[soupbowl]

The place you buy the thumb drive is also a stranger that can't be trusted.

[akerl_]

This kind of paranoia isn't productive.

[Terr_]

It was productive enough for the NSA and FBI when they were intercepting equipment deliveries and installing backdoors in them.

A USB stick that can secretly remember any file that looks like a key file or certificate would be very easy.