The best way to mitigate this risk is to make sure there are standards and a viable vendor poole. There will always be higher risk associated with a single vendor.
Can they mitigate risks from US businesses too? They are the biggest risk if you go by facts and not rumors and propaganda after all.