Why are you telling someone else how their hypothetical implementation works?

There's no hypothetical, they tried to equate this to basically buying a gun where you do the certification on purchase. Internet connected devices are not planned to be controlled like that but per session. Under that model what they proposed is obviously not going to work.