When nation-state actors route attacks through trusted supplier pipelines, the damage does not stay inside any single organisation's network or any single country's borders.
A single unpatched container vulnerability can propagate across jurisdictions, supply chains, and critical systems that no single policy framework was designed to govern.