I strongly disagree that it's already regulated where needed. Eg cheap IoT devices. The "stop all software development"... No. You just have the sbom as a desi

I strongly disagree that it's already regulated where needed. Eg cheap IoT devices. The "stop all software development"... No. You just have the sbom as a design requirement and design it in. It's not rocket science. It's regulation, like always there will be a schedule for it, so compliance can be ready when it comes into force.