In other words, it depends on whether it is targeted and what the motivation is.
Criminals won’t target Purism products because the payoff is many orders of magnitude poorer than targeting Microsoft / Apple / Google products.
Corporate and government criminals might target Purism products but more likely if the specific person of interest is known to be using Purism products.
Trying to backdoor the supply chain would lead to a lot of noise, a lot of false positives, a much higher risk of detection before mission completion.
Canaries are in place to detect government-mandated secret backdoors, albeit that there is always a window of opportunity of up to 3 months. (Does this mean that if you are a high risk individual, you should purchase the device and then not use it, not even power it on, until the next quarter commences?)
Trying to backdoor through interdiction is more focused. Purism’s anti-interdiction service in no way stops targeted interdiction. It intends to detect interdiction. If you are a high risk individual, use the anti-interdiction service.
If you are at high risk of targeted interdiction, I don’t see how you are better off using products from companies that haven’t even thought about these problems. ???
If that is the concern then you are a potential customer for the Librem 5 USA Edition.
One more comment: Be an early adopter. Governments are usually reactive, and slow to cotton on to things. Get your device before governments wake up. Get your Purism order in now. 