Gaël Duval explains why the EU's proposed Cyber Resilience Act as written would have a damaging effect on open-source.