Hackers last year conducted a 'dry run' of SolarWinds breach
How many other SolarWinds are there? This company was allowed to install code on highly secure computers, but did not themselves have high levels of security. The practice of allowing random companies with poor security practices to install code is what lead to this breach. Any company that is allowed to do so must have 3rd party security auditing on a continuous basis.