If foreign made routers pose a severe cybersecurity risk then why would you let the current ones on the market stay? If they were truly a problem you'd remove them from the market, not grandfather them.

But like everything with this capricious administration the real reason they're doing this is probably because someone greased their palms.