I never really understood this sentiment. Some foreign company / government cannot do anything to me. My own government, on the other hand...

A foreign company can’t steal your IP to build out competing products?

Or use source code to find novel vulnerabilities and deeply compromise your company?

Often it's the law. I don't trust the EU more than I trust the US or China, but I also cannot transfer data outside of the EU