What does being from a particular country have to do with a verified CVE?

It’s not like it was their first rodeo and they got lucky. There are lots of competent security companies located in countries all around the world, including ones you may not politically agree with.

So was the Intel/Apple-silicon/Nvidia chip your PC is likely using. Consider judging companies based on their actions and not their ethnicity