For any Fortune 500 (Google, Apple, HP, etc.), have certain staff work covertly under shell subsidiaries but develop close rapport with key vendors (as said sub

For any Fortune 500 (Google, Apple, HP, etc.), have certain staff work covertly under shell subsidiaries but develop close rapport with key vendors (as said subsidiary), make straw purchases and do comprehensive (bordering on intrusive) supply-chain surveillance and auditing, because the targets on the side of the parent corp's "boat" paints them as easy marks for industrial/economic espionage/sabotage/monitoring. Not only does this help confuse/disinform competitors, but it can make attacks by state and other actors more difficult. This might mean high-resolution X-raying of all hardware and cryptographic signature verification of all firmware in order to prove hardware received is what was designed, and nothing else.