This should be getting a lot more attention. NXP chips are in a lot of products. It's likely the TA knows of specific flaws reported to NXP that can be leveraged to exploit devices the chips are embedded in, and that's assuming they didn't implement backdoors themselves. Over 2.5 years (at least), that's not unrealistic.
https://www.tomshardware.com/news/chinese-hackers-steal-chip-designs-from-major-dutch-semiconductor-company
Chinese hackers steal chip designs from major Dutch semiconductor company — perps lurked for over two years to steal NXP's chipmaking IP: Report

The full extent of the security breach is unknown.

Tom's Hardware
Hackers spent 2+ years looting secrets of chipmaker NXP before being detected

Chipmaker claims breach had no "material adverse effect."

Ars Technica