"“Supply chain risk” means the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a covered system so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system (see 10 U.S.C. 3252)."

Src: https://www.acquisition.gov/dfars/subpart-239.73-requirement...

Now why would anyone want to use a product that carries that designation?