I can’t speak for other countries, the EU banned it a while ago, but up until very recently a lot of citrus drinks over here in the U.S. used a chemical called Brominated Vegetable Oil as a stabilizer/emulsifier I think? So at least in the U.S. there can be fats in some sodas. Maybe enough for the THC?
I agree that cybersecurity features should be included. In fact I think they should be included for free. The problem is that Microsoft wanted to charge the Department of Defense and it sounds like they used politics to make sure they could, and if true then they (and maybe also the DoD?) may have violated some federal laws around government procurement and “gifts” from contractors to the government.