If US govt really cared about OS-level security vulnerabilities from malicious apps, a better strategy would be to require Apple, Google, and Microsoft to make their OS 100% source-available (non-duplication) and encourage serious industry criticism of their codebase. Current strategy of selectively banning Chinese apps and products is just bullshit.