>Vulnerabilities have nothing to do with country of manufacture.

That depends on how you define "Vulnerability", doesn't it?

For instance, from some standpoints, the absence rather than presence of a backdoor in consumer routers could be considered a "vulnerability", no?