Earlier quoted context omitted.
In my experience, it's not that companies are choosing any one strategy over another. It's more that companies have no idea what their supply chain actually looks like. Only that the widgets show up at their loading dock every week, and that the shipments have always been reliable in the past, so that there's no reason to look any further. There are often strong disincentives, as well. Nike, for example, got themselv…
This is it 100%. I work at a major financial institution and we invest ridiculous amounts of money, effort and, frankly, delay, in understanding our supply chain, its security posture and risk management model. It's a unbelievably gargantuan effort and if it weren't for the scary shit that we find all the time one could easily argue it's a waste.
We laugh about golf and Vegas visits, but it's really hard to stab someone in the back when you're used to looking them in the eye. If they're just some suit you meet once every three years? Fuck 'em.