Fortunately, there are plenty of private sector companies investigating Salt Typhoon.

I can speak for the firm I work for. Our clients are effectively invulnerable to Salt Typhoon. Yes, I know that sounds like a "big claim" but it's really not. We enable our customers to run endpoints that aren't based on Windows or macOS. So...