While I agree that you could find firms that have not stolen IP to make their product, trying to nail down the sanctions to individual businesses would never work. The number of entities you would need to track and audit is enormous and it's way too easy for someone to launder the information around to supposedly "good" businesses.

You're talking about the entire supply chain, so you would end up punishing firms that are otherwise innocent because unbeknownst to them they bought resisters or capacitors or silicon plates from a bad actor.

A smart approach is just not feasible at this scale.