Well, pump the brakes on this. In Sum of All Fears, the bomb came from a lost nuclear missile during the 7 days war. So the bomb came from Israel. But crucial plot point was that the nuclear material came from a US nuclear site (hannaford, Washington?).
So I think Q has been describing the U1 path from the USA to bad actors around the world through various in-between middlemen.