Doesn't any foreign company contributing a device driver to Microsoft present the same risk profile (could be based in Russia, or infiltrated by russian agents,

Doesn't any foreign company contributing a device driver to Microsoft present the same risk profile (could be based in Russia, or infiltrated by russian agents, or hacked by russia)?