Oh please. Then any MIT licensed software is also a supply chain risk.