Won't those backdoors be discovered? The worry is existing backdoors put in by accident years ago.

Imagine a Trojan horse. Once it’s inside the walls, it appears benign. In practice this could be a credential, a phone-home (that wakes up at a later date), a fabrication change to install a rogue component – any number of “backdoors” that are not strictly vulnerabilities.