Companies that handle or touch U.S. customer data must have code written exclusively by citizens or people with visas with the appropriate clearances inside the U.S.

More software , such as banking software, iot, control systems all needs to be done vertically in the U.S. just as cyber security should be done by people with clearances.

It really is a security concern.