Yeah. TAO was intercepting Cisco routers in transit and installing implants.

The leap from supply chain interdiction to cooperative insiders isn't a big one.