It's still a risk. You can train an LLM to respond maliciously to a very narrow range of requests that would not be easy to spot in general testing. If you know how the LLM is used, you can target that very specifically. It doesn't have to be as blatant as "always deny the Tiananmen Square massacre ever happened".
Given how thoughtlessly people use AI, and how opaque some of the systems are, I think this is a legitimate concern.
And yes, every government outside America should ban the use of ChatGPT and Claude. Obviously.