The fundamental issue is that these days there isnโt European software (and I doubt even American software).
We all rely on a supply chain of software. This open source library from a French guy hosted on an GitHub, this linkable but closed source library for interacting with this piece of hardware, this componed developed by people all around the world and hosted in Germany.
Heck even the Linux kernel kicked out Russian maintainers for this exact reason.
If the S* will hit the fan as the s* promised during election, I expect more and more government mandated backdoors.
Imagine the s*show of log4j but this time in boost or gcc std library made in a way that seems an innocent mistake, hard to trigger and hidden in the changelog and submitted at the same time a legitimate change in the same file happen