I think the actual cause of this is outsourcing to China where you have no transparency as to who actually does the work. It’s nearly impossible to outsource to NK from inside the USA, but it’s pretty trivial to do it inside China.
My guess is that the work got outsourced twice with one Chinese middeman company keeping the difference.