Sorry but you're acting like a drama queen. He explained everything in a few tweets. (I haven't listened to the Podcast)

NO ONE will use this attack vector, if there are better options. If you infiltrate the supply chain you wouldn't try to compromise the signing algorithm, you would directly go to i.e. seed creation. There will never be 100% security and fixing this issue won't change anything, because you open up new attack vectors... I don't understand why you are so focused on this and what you try to prove here...