EternalBlue was probably the biggest backdoor used by the US government for years and even Microsoft (at least officially) didn't know about it. Finding and not reporting bugs is much easier than getting a company to put in backdoors without anyone blowing the whistle or objecting.