I hope that there will be legal ramifications to discourage this kind of behavior, but ultimately, the vendor that packaged Superfish with the computers is a Chinese company who will probably claim that this kind of thing is permitted by their EULA.
That's not how it works. Even if your plumber has "I might come back later and take look your safe" hidden somewhere in his EULA, it's still burglary. Laws are, thank god, over EULAs.
Although Superfish was founded in Israel, they're headquartered in Palo Alto now.
The nationality of Lenovo is relevant insofar as it affects the applicability of US law. IANAL so I can't say how relevant that fact is, but I suspect it complicates litigation..
Damn right. A grand jury can indict without the defendant present (in fact that's how it usually works). Then the US can work to extradite, or just arrest if any of the defendants ever try to enter the US.