The rumor probably exists, but the US seems to just bully companies into getting access rather than building back doors into equipment, based on available evidence. They do maintain unpublished 0 day exploits though, so it could also be both.