Sovereignity by ditching open source software for a proprietary solution made by a US company?
SAP is German.
Does Scholz really expect someone checking it thoroughly, each time?
Let's not pretend that people do this with open source software either. Especially obfuscated mechanisms might not even be seen by the few people who do check it.