It's not about espionage, it's about sanctions intended to cause economic loss to the companies targeted (and thus to the country those companies are in).

State level actors won't be using such "flagged" companies as their delivery method; see Jia Tan.