What I'd class as major would be some third party gaining access to NVIDIA's RTL designs and source code for their drivers

Ransomware operators are not that clever, they go for low hanging fruit. I mean, yeah, by all means, do recon on a system you just pwned and try to do a supply chain attack, but it's outside the range of these operators. They only have a hammer, and everything just looks like a nail.