Software is something I think we’re sleeping on. Any Windows machine, Android, iOS, should be considered compromised due to them being developed by American companies. The solutions to this currently are either effectively or quite literally non-existent.