Earlier quoted context omitted.
I will say "Yes". With 100% certainty. Interesting people do stuff like this "for fun": http://dangerousprototypes.com/2013/01/19/29c3-travis-goodsp... and this: http://spritesmods.com/?art=hddhack How much would you bet against the people described below having even better versions of those two hacks, and being fully aware of Amazon's supply chain? "The book included a photograph of intercepted packages being opened…
Haha, well if your threat model includes the government I'm fairly certain we're all screwed.
Having said that, I suspect in light of recent Snowden releases - it seems a bunch of German and Brazilian commercial businesses who probably didn't expect they had to consider the NSA as a plausible attacker are now having exactly those discussions.
I suspect _any_ prudent CSO of any company who's commercial competitors include politically connected US companies is now wondering whether they also need to consider that risk.