If Huawei is incompetent at managing OpenSSL in their codebase to the point that there are nearly 100 copies sprinkled through, most of which are vulnerable to exploitation, that seems like a perfectly reasonable basis to bar their products for a number of years, regardless their nationality or other actions.

F5 Networks should have been branded a black sheep for its various TLS implementation screw ups (they are the prime reason TLSv1 is considered insecure), yet they came out mostly unscathed. We need to stop giving a free pass to horrid development practices that create massively vulnerable software.