Reply to post:

I don't think that the software is anything as much of a risk as becoming dependent upon the supply chain. If all the networks roll out kit from the same supplier then, for whatever reason, all the networks are at risk if there is a problem with supply. Spying is easier done per device rather at the network level, but the networks are sensitive to disruption. But, as was demonstrated last week in Germany, causing network disruption is as easy as cutting a few cables. Or, as happened a couple of decades ago in Manchester (and possibly elswhere, this is just one incident I happen to know about), having some scrotes drop wheely bins on fire down access chutes. Good job the back lines were in the same access chutes…