Preventing or Mitigating Adversarial Supply Chain Attacks; a legal analysis