Yes, they can work with someone else. Marking them as a supply risk is one way they can avoid using them and instead use someone else for their needs. So now it seems like we are in a limbo where the government knows that Anthropic is a risk to work with, but they can't official put them on a list that states that.