The security questions around Chinese AI coding models in U.S. software