Supply-chain security is not owed to anyone. Companies must take responsibility for their own security. Individuals and organizations are accountable for their security measures.