supply chain risk has a standard definition that matches what you think, and a legal definition that lets the government do whatever it wants.