The problem is expecting suppliers to do QA and judge whether something is fit for your purpose. Regardless of whatever indemnity the supplier provides it will

The problem is expecting suppliers to do QA and judge whether something is fit for your purpose. Regardless of whatever indemnity the supplier provides it will always be your name on the product, and you should be solely responsible for ensuring the product meets your requirements. I do consider it evidence of organizational incompetence to state that you're staking your organization's reputation on some other organization that you don't own.