They might start scheming behind employees backs as soon as they realize they are being used in critical infrastructure of adversaries. And nobody would know until it's too late.
If you sell a blackbox from a third-party (e.g. from China), you are liable for somebody else's decisions that you cannot scrutinize.
So, that's kind of the argumentation that underlies sovereignty and why Chinese Models are not being used in critical infrastructure.