Imagine to be a e-commerce launching itself into masks now. Without insurance, proper due Diligence of suppliers and potentially no way to track batch numbers. And then something like that happens. You are in for a lot of pain.

Apparently you can get coverage, or rather a waiver, from the government if you are a non-profit.

As a side note, the government is now seriously launching itself into procurement. For example German states are starting procurement themselves.