Because last time I checked, private companies that voluntarily offer a service to the government on contract terms are free to put whatever restrictions they want into their contract, and the government is free to not sign it if they don't like it?

Or is, say, FedEx now a supply chain risk too, if they happened to offer parcel delivery services for the DoD and put in a clause excluding delivery to active war zones?