Notice they say supplier vetting, rather than "product vetting". Aka, they're vetting just the supplier, and is not vetting the product itself. This simply means the supplier could lie, and there'd be deniability!