@argv_minus_one Do you have a reference on that? It doesn't line up with my understanding. For example, Mozilla does not say anything like that in their criticism back in May, and it seems that things have improved since then https://blog.mozilla.org/netpolicy/2023/05/15/mozilla-weighs-in-on-the-eu-cyber-resilience-act/