NSA contributing to Coreboot

Not at all surprising. Fucking glowniggerrs have had their radioactive dicks in all types of FOSS projects. SELinux, SystemD, Tor, FreeBSD, RedHat, Debian, likely many others.

Can't we just second-vet the code so that it can't happen?

We can do this. The question is who is willing to invest the resources to do the audit. If you're willing to invest, then that's just too bad.

anyone who cares should be willing to do it. if they dont then they can stop complaining.