If they accepted the offer this would actually create a Catch22 chicken-and-the-egg situation where they can't employ a non-approved vendor.

Also: filling this in can open up liability. There's no way you get it all accurate, and in the event of a breech (e.g. supply chain attack where you get hacked leading to them getting hacked) they could argue that you misrepresented or didn't comply with your stated response.

So the 5k which could never be paid might also not be worth it.