Open-source software vs. the proposed Cyber Resilience Act (NLnet Labs)

This also seems to create more jobs for bureaucrats. I remember quite a few audits where all that happens is that people just look at all the "paperwork" (now digital) and nobody looks at the code. Then in the end the liability is so diluted that no one can be held responsible, especially not any government agency that on principle don't suffer consequences from mistakes.