Do we still fall for the China = must be spying, US = wouldn't spy unless it's disclosed?

It's fair to say whatever software you run from any country of origin is hoovering up as much data about you that it can get away with.

If you haven't compiled open source, audited code and are running on that, all bets are already off.