The keys that sign the software are probably located in the US, or are otherwise within reach of US jurisdiction. That’s as much a risk as assembling hardware i

The keys that sign the software are probably located in the US, or are otherwise within reach of US jurisdiction. That’s as much a risk as assembling hardware in the US would be.