ITAR is for US persons ONLY. SpaceX services the global market, as does China. Sure, NRO won't be launching on a Chinese stack but it'd be a bit foolish to think commercial launch consumers wouldn't look at the top two launch providers to decide who they'll pay to launch their payload.