Antivirus software typically requires some level of privileged access. Given Kaspersky's deep collaboration with the Kremlin it's a serious attack vector.
Correct. The US government is not going to compel Alphabet to use Chrome as an attack vector against the US. Therefore the US is not concerned about Chrome.
This isn't a technology issue, it's a governance issue.