This is where the focus should be. The entire world has put all eggs in one nest. That's just asking for trouble.
There are, especially when you look at the DOD/IC side of things. A lot of effort is being put into trying to reduce the risk of a a nontrusted or malicious supply chain (which ranges from issues like counterfeit FPGAs to hardware shipped with nefarious firmware)