Contrary to popular belief, the EU is not very fast when it comes to enforcement on requirements like these. We already saw this with the ePrivacy Directive and

Contrary to popular belief, the EU is not very fast when it comes to enforcement on requirements like these. We already saw this with the ePrivacy Directive and GDPR: those scary hundreds-of-millions-of-euros fines are only handed out after ongoing and deliberate violation, where you've already received plenty of warnings and smaller fines. 18% compliance after one year with zero enforcement is not great, but it's already a massive increase over the near-zero repairable products we had only a few years ago. On top of that it is 18% of models, so there's a decent chance that a huge chunk of the noncompliant ones are obscure brands with near-zero sales: a handful of models by Apple and Samsung already add up to over 60% market share. And the report was literally written by iFixit, so there's a rather clear commercial incentive to underrepresent it and push for the strongest enforcement possible.