I'd guess the main risk is that these are fairly small companies with shaky financials that may go under.
For hobbyist I'd say risk here is near zero - comparatively at least. These are going to get wiped and don't have an obvious persistent attack vector and likely deployed behind a NAT. There are a bunch of much softer targets in the average home that don't (IoTs, routers, software etc).
Unless using commercially or you're someone special I don't think it's worth worrying
They're so inexpensive that perhaps you could just purchase a lifetime supply right out the gate? :P
LCSC seems pretty decent. Dave from EEVBlog tested some cheap regulators from there and they performed in spec. Not a huge sample size but still.
Everything is from China.
Most chips (and these probably included?) are actually from Taiwan.
I know that AVR, PIC, microcontrollers directly ship out of Taiwan for instance.
Well not the chips or the microcontroller IP, but maybe the packaged product.
I read today that 8% of US good consumption is from China.