> but it's not free to then claim the company that offered those terms is a security risk
Yes they are free to do that. You have to blame Congress for giving them that authority under the Federal Acquisition Supply Chain Security Act and specifically 41 U.S.C. § 4713.
But Claude’s ToS didn’t prohibit use of Claude for sensitive military operation but it was coded to do so. It was part of the government’s evidence