I had an eye opening discussion with an IT admin who stated with a straight face that their “patching strategy was not to patch”.

They have a patch strategy! They considered requirements when deciding the strategy! They have a documented strategy, it’s just very brief. (“Don’t.”)

The Trump admin may have similarly thought about this issue for a few seconds, shrugged their shoulders and decided that this might force manufacturers to go on-shore.

You and I know it won’t, certainly not in the immediate future, which means massive disruption to industry, but that’s not the same as “no plan”.