> Why can’t the DoD say “ok we’re going with a different vendor”?

That's exactly what they're doing. It turns out the DoD is a really big bureaucracy and has process to make sure they thoroughly exclude a vendor and transitive dependencies on that same vendor.