I can say a couple of thing about this.
I think that certainly before the 2017 intelligence law it was clear that Chinese citizens are always required to respond to the demands of the Chinese Communist Party. I think the intelligence law simply made explicit something that was already in effect.
With regard to Hong Kong, Hong Kong is now fully integrated into the mainland system. The companies that operate there would not be able to be independent of Chinese Communist Party control, and therefore I think should be regarded the same as companies from the rest of China.
I would say one other thing. These kinds of procurements are not reciprocal. The Chinese government would never put any foreign 5G into their telecommunications, allow any foreign company to install security equipment in their embassies or allow foreign acquisition of mines and other energy resources. I think that by itself, aside from the moral issues that Christian brought up, suggests this is not something that we should be doing.