Open-source software vs. the proposed Cyber Resilience Act (NLnet Labs)

Yes, just as it incentivizs selling engines, wheels, fuel tanks, chassis, steering etc separately over selling cars, and giving consumers a choice of how they put their car together.

In practice, the consumer pressure to sell a complete car, with more obligations on the seller than car components have in aggregate (since you're also responsible now for the way the parts are put together, and for interaction between parts) results in companies not going down that route. I suspect that the same will be true of computers, phones etc - selling a complete device, and taking responsibility for the whole thing, is easier than selling hardware without an OS (but with lesser guarantees) and a separate OS that make guarantees on the assumption of hardware functioning in certain ways, thus not being responsible if the OS requirements to be secure aren't met by the guarantees the hardware offers.