> Chinese vendors deliver software and components full of vulnerabilities, but none of them seem to be intentional.

Plausible deniability.

If we're talking about cheap products, then it's more likely due to cost savings rather than malice. But yeah, no one can give you defitive proof of this.