The legal definition of supply chain risk:

> “Supply chain risk” means the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a covered system so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system (see 10 U.S.C. 3252).

Naming a US company a "supply chain risk" is basically saying "this company is an adversary of the USA", which is FUCKING INSANE.