A draft document shows that the EU wants to allow the exclusion of foreign companies that pose security risks from its public procurement market, with particular worries about data transfers and weaponisation of the bloc's dependencies on tech and minerals.