Correct. The US government is not going to compel Alphabet to use Chrome as an attack vector against the US. Therefore the US is not concerned about Chrome.

This isn't a technology issue, it's a governance issue.

Google is an American company, so how is that an attack vector the US government should be concerned about?

Chrome doesn't run in kernel space