Is this explainable in any way by the cost of running these boards? By the sound of it the cost-benefit of thwarting Salt Typhoon is probably not optimal at zero investment.
Replacing government run and funded cyber security and threat assessment roles with privately owned contracters will be quite profitable for a few of the Brolliegarks.