[the8472]

Depends on how much the company values (i.e. is paying for) that supply chain security. And if enough companies cared they could even save money by pooling efforts.

[pabs3]

The crev folks aim to create a tool to allow that pooling:

https://github.com/crev-dev/