It's an interesting sentiment for sure. But unlike other engineering disciplines, software flows freely and easily between borders. What about, say, importing s

It's an interesting sentiment for sure. But unlike other engineering disciplines, software flows freely and easily between borders. What about, say, importing software from countries like China, where in some cases developer best-practices are lax? Do we then need some sort of vetting process for the import of foreign software? That seems the logical conclusion of implementing something like this.