An exception or two to the rule does not invalidate the rule. Most ordinary commercial businesses using US-made devices or online services don't deal with technology their government considers a national asset, and as a result don't have to be as paranoid as Airbus, BAE, Petrobras, etc.