That news article doesn't mention the designation of Anthropic as a supply chain risk (it was published about 20 minutes before Hegseth's tweet)