Comment by ohyeshedid

> Purchasing within the country is more secure unless you assume all devices sold within the country are compromised and monitored in real-time which seems unfeasible.

One preinstalled mitm cert, or sketch CA, is within the realm of feasibility.