Some foreign companies may be complying—potentially offering China’s spies hints for hacking their customers.