Why manufacturers going outside US could be a security risk