@fj I love Debian to bits. But its statement on the #CyberResilienceAct is based on old text. I suppose that's inherent in commenting on a draft that is evolving behind closed doors. But now the actual text is public, a number of worries in the Debian statement are no longer an accurate reflection of reality.