This is great context and I feel that this is bringing in a lot of information that I wasn't aware of.
If what you're saying is true, then there is truly no supply chain risk other than the risk of civil action against the government for violation of terms of service. That seems like a rather weak point on which to balance a "supply chain" risk though.