“Bad actors could acquire the data, but purchase controls already mitigate that risk. Intelligence operatives scrutinize potential customers’ infrastructure for ways that data could reach enemies or nefarious actors.”
Something tells me that every serious intelligence service already has copies of this data. There is no way to secure 100 different companies, and definitely not forever. Purchase controls mitigate the risk, really?