Statements are very specific so it's easy to craft them in such a way that it basically respects the gag order and does not actually contain any untrue statement. Even " Apple has never found malicious chips, “hardware manipulations” or vulnerabilities purposely planted in any server."
Would this statement hold true if it was found not by Apple?
"Apple never had any contact with the FBI or any other agency about such an incident."
If Incident was being handled by 3d party private entity which was in contact with some gov entity this would hold true.
"We are not aware of any investigation by the FBI, nor are our contacts in law enforcement." If it was contacted by entity other than FBI this would hold true.
Also national security related investigations are highly segmented in corporations -- in the company the size of apple for instance there may be a handful of people with knowledge that the investigation is ongoing or even exists. Its not like the PR department (or even the full board) may be aware of its existence.
"Apple never had any contact with the FBI or any other agency about such an incident." If Incident was being handled by 3d party private entity which was in contact with some gov entity this would hold true.
"We are not aware of any investigation by the FBI, nor are our contacts in law enforcement." If it was contacted by entity other than FBI this would hold true.