If the U.S. government wants to forgo a comprehensive approach to risk management and simply seek alternatives to Huawei, it has several options