The legal reasons are legit. 'Foreign Governments' are not 'Our Government' and of course China is not the US. That matters.

I suggest that the 'deal' should likely involved localized data and internal controls, with oversight, so that the CCP just doesn't have operational access to the data.

Companies at a certain scale have regulatory requirements, it's just like in other industries.