Yeah, that’s certainly a thing, but I’d be surprised if China messed with something like Pine64, that’s a pretty low-value target to spend so many resources attacking. The bigger targets would be large corporations like Amazon and Apple, as well as military institutions and contractors.
It’s certainly a valid concern, but it’s also a pretty minor one.