So that's an excuse, is it?
If I am manufacturing 250,000 devices ... >> is that all?
am I going to generate 250,000 unique SSH keys ... >> yes!
give them to my (Chinese) manufacturer, and expect them to ensure that each device is programmed with a unique key ... >> absolutely
and correlate the devices to the keys (so that I know which device has which key) ... >> that has to be a MINIMUM expectation.
AND keep all that from leaking to ______ ... >> whyever not?
It's really fucking hard ... That's exactly the way it should be!