It doesn’t have to be espionage, it can be just operational risk. There is the case of Trump ordering sanctions against the International Criminal Court, and Microsoft blocking their accounts to comply (https://en.wikipedia.org/wiki/Executive_Order_14203). Or more recently, Trump deciding who gets access to Anthropic’s latest models. You can’t build a business on a vendor who may be forced to block you at any moment.