Yep there is an entire risk profile stage that many people leave out. And they apparently correctly estimated the risk in this case. At least for now. Probably wasn't reasonable to estimate such a long supply chain disruption though (that it's still happening now).