It's a lot more like a bunch of people bought Cisco networking equipment and then the NSA secretly intercepted shipments, implanted surveillance backdoors, then resealed the boxes and sent them on to unsuspecting overseas targets.

If there are no seals at all then it’s hard to argue this is the correct analogy.

And there was no interception. At the very strongest, the bad guys convinced Cisco to ship the stuff, and Cisco is saying it’s not their responsibility.

They definitely shipped something they didn’t build or check.