Every action has an opposite reaction. The DoD has made itself riskier to do business with, and future contacts will have to price that risk in.
In Hegseth's voice - No longer politically correct "DoD". It's precisely violent DoW now.
The DoD has been rather consistent that they will decide what to do with a product sold to them, not some random vendor. There is nothing extra to "price in".
FedRAMP and FedRAMP adjacent revenue is non-negotiable for vast swathes of businesses. The designation of "supply chain risk" is viral in nature because no GRC team will dare take such a risk within their supply chain because most customers add BOM requirements in contracts so this will end up falling under those already.
There's a lot of backchanneling going on between Emil and Dario because everyone's in the same circles but it's all for naught.