The back doors are in the chips. Software takes advantage.
We have known of these holes since the 90's. Tech companies have agreements with the gov, and they cannot even acknowledge those agreements in public.
Fix the holes and nobody can spy. That is the fight, not if you are secure, but who has access to that.