Maybe it’s just a huge honeypot from the three letter agencies to find people suitable enough to break „secure” pendrives etc? Just thinking out loud.