One of my significant fears about the EU Cyber Resilience Act is that it could be abused by vendors to force DRM-like limitations into consumer products, as Synology is regrettably attempting. https://arstechnica.com/gadgets/2025/04/synology-could-bring-certified-drive-requirements-to-more-nas-devices/
One of my goals in engaging strongly over the CRA and especially its standards is to ensure that they are written to prevent this, as far as possible. We have now placed many #OpenSource experts into EU standards committees as a result. Can you help?