Well then you just set up a system where companies that are CNI have oversight at some level of course this does mean a lot more vetting and it can be abused like France declaring a yoghurt maker was CNI.