My take is
- if you speak out publicly about China or its activities, or
- if you were born in China or have close relatives who were born in China, or
- if you are in possession of commercial Intellectual Property or government secrets that would be of interest to the Chinese government
then you should definitely be worried about “Made in China”. Otherwise you should be at least as worried about your own government or a number of other governments.
My ultimate goal is 100% security. That isn’t achievable today. It may never be achievable.
I’m satisfied that Purism is doing as much as it realistically can for v1.
That assumes that the chip actually is ‘Made in Germany’. Noone has confirmed that. (It doesn’t matter for my own Librem 5 because the bands supported by the Gemalto modems are no good for me.)
Trust isn’t the ultimate goal. Someone once said “trust but verify” 
but really “verify is a substitute for trust”.
I need to echo that comment too. I understand that there are wider considerations but I am commenting only on the security aspects.