I haven't gotten into the DIY/Hacker/Arduino stuff but it seems like there would also be plenty of consumer devices that may be impacted that don't have correct supply chain control (or care about the source of their chips).
Microsoft has confirmed that they're aware of the issue, and are investigating. No news yet on what (if any) action they'll take. But I'd expect they'll do something, as it would appear to the end user that "Windows Update broke my $DEVICE".
Yeah, Microsoft has a pretty robust hardware lab as part of WHQL certification. I would expect there would be some off brand devices containing this chip in their lab.
Or on-brand. One of the things that makes FTDIs decision so bad is that even a reputable manufacturer could be caught out by fraud somewhere in their supply chain.
I wonder if Windows will pull the driver.