You're completely right, I mistakenly left out the US so I'm going to edit it in. If you include the US, it's five. The first two are of course trivially correct. I'm leaving them unnamed in the hope that those who write all-knowingly about this topic yet can't instantly name them might realize they don't know much about software sovereignty in the first place.

The third one is definitely a notch lower than the others, as I noted. But still IMO noticeably higher than the other 196. The point still stands if you don't count them.