Western governments have very little leverage over the Chinese open-source ecosystem. There's kind of far fewer routes in terms of talking to developers building to make quick fixes when certain vulnerabilities have been identified by the national security community.

– Ardi Janjeva