Most member countries are too small to have their own capabilities. It's either some sort of EU capability or outsourcing to US/China. Denmark can't afford operating a fleet of stealth bombers or whatever. In the past, basically all the big-country stuff was outsourced to the US. With Trump being elected twice this strategy seems to be a lot less safe than what everyone (except the French) used to think.