tbh the export controls issue looks very suspicious, I happen to be involved in export control and audit, and they should have systems that flag up customers that have blacklisted on export controls. Usually any flag gets reviewed by financial officers who should be audited. There is potential for problems if they haven’t implemented adequate internal audit standards, that should be part of their annual external auditors report.