These are just very different things. OAI "hacking" anything isn't OAI telling the US Gov what they can and cannot do with their product. Maybe along all kinds of axes, one is more alarming than the other, but it's a canard in this topic.
OAI hacking the chinese government will definitely raise alarms in DC and will be bad for national security. Just because the country that was hacked (australia) is a weaker one doesn't mean the underlying action is not troubling.
That seems like it's too easy to abuse as a cudgel for whatever companies you vaguely hate. Is ExxonMobil a "supply chain risk" because the effects of climate change might cause geopolitical ructions in the next decade?