A specific model of supermicro was compromised in order to exfiltrate data from specific targets.

Where was this from?

From what I read, it was possibly ALL Supermicro systems between a specified date range

That level of supply chain attack is too massive to reasonably worry about unless you're inspecting every chip on all your new hardware, and there's reasonable ways to discover leaks when things are all stacked.

If you are too paranoid you'll never get anything powered on, and if the attacks are getting past supermicro, then does it really matter who you buy? cisco is made in china too,

I think the key is to just not buy hardware made in China, which isn't impossible