A risk, but not remotely the same risk or same severity of risk as hosting data in US clouds.