C (and C++) has a supply chain. It's called unpaid Linux maintainers.