Supply-Chain and Federated Learning Risks