Can the SolarWinds incident spur more action, less talk about supply chain security?