OTOH, it gives more options to implement Cyber Resilience Act requirements, especially once the boundaries get mapped out in real life