This is such a big deal that it presents problems for vendors working on even completely open, non-sensitive systems. Like my company. We are a foreign language instruction company that serves primarily DoD. Some of our customers are being super reluctant to approve a specific project of ours because it is nearly impossible to buy appropriate hardware that is not manufactured in China. We have to settle for a hardware vendor that is not our favorite choice because at least the design company is US owned.
It's not technically correct. It should be fine to use these systems for non-sensitive purposes, but you try negotiating a contract with a CO who won't explain themselves/refuses to clarify with his own command that this is OK.