Sen. Tom Cotton’s new bill is a long-overdue recognition that the same authoritarian regime flooding our markets with cheap, internet-connected medical gadgets is also the one that has spent the last decade probing U.S. hospital networks and stealing patient data. By forcing device makers to prove their hardware isn’t a backdoor for Beijing, the legislation draws a bright line between national-security supply chains and the ones that can literally stop a heart monitor mid-procedure. For Second Amendment supporters, the parallel is obvious: just as we refuse to let foreign governments dictate what firearms or ammunition we can own, we should refuse to let them embed themselves inside the medical devices keeping our families alive.

The deeper implication is that Cotton’s approach treats cybersecurity the way pro-2A advocates treat magazine bans and “assault weapon” restrictions—by rejecting the premise that government should simply trust foreign manufacturers to police themselves. Instead of waiting for another ransomware attack on a rural clinic or a compromised pacemaker to force action, the bill shifts the burden onto companies that have grown fat on U.S. healthcare dollars while remaining silent about CCP influence. That same logic applies to every other critical sector: if we won’t let China build the guns or the networks that defend us, why would we let them build the machines that keep us breathing?

Ultimately, this legislation is a reminder that sovereignty is not a single-issue fight. Whether the threat arrives through a smart pistol lock, a networked insulin pump, or a cloud-based EHR system, the principle is identical—Americans must retain the ability to know, and to control, the tools that affect their lives and liberties. Cotton’s proposal is a small but concrete step toward restoring that control before the next supply-chain crisis turns a hospital ward into a battlefield.