Sure. But at the same time it would be foolish to assume that Symantec doesn't work with the US security agencies or Sophos doesn't work with British agencies.
In the worst case scenario, if the government wanted them to, they would have to hand over anything they work on to continue operating.