Yeah well aware of that stuff here. Two companies I worked at had entirely airgapped infrastructure because they knew the adversarial situation wasn't winnable. Everything was checked for implants at goods in. It's shocking some of the shit that goes on.
I run grey man where I can. Stuff that's private stays private. Paper and physical security is still good.