China and America are not the same but the solution works against all actors: permit users to audit and change the code so dependencies on servers can be removed or replaced with ones of our choice. Without the source code to learn what it’s actually doing then all software is potentially a security threat, at best it’s just not yet guilty of being malware or having anti-features.