>>I tend to go with US-based companies because they would legally be liable for damages

I am not sure under what legal basis you draw this conclusion given the EULA's and other laws explicitly shield them from said liability

you would have to prove intentional malicious intent not simply negligence

One of the big problems I have with more US Companies is they are a network of vendor Lock-in proprietary ecosystems that often do not work well together at all.

I prefer Open protocols, which sadly seem to be only adopted by non-US Companies.