It&#x27;s not as if they can&#x27;t tell Google to put out a &#x27;special&#x27; version for their country.  Or put out their own infiltrated version and take whatever measures necessary to &quot;own&quot; the OS.  They could poison DNS for &quot;favorite terrorist distro&quot;.<p>It&#x27;s not to make it 100% foolproof, it&#x27;s to make it so that any misstep would reveal them.  In other words, make the whole of their communications system leaky _somewhere_ not necessarily everywhere.