Switzerland has enacted the "Federal Law on the Use of Electronic Means for the Fulfilment of Governmental Tasks" (EMBAG), establishing a mandatory requirement for open source software within public sector bodies.
Swiss lemming here. Switzerland already open-sourced multiple projects before, most notably the app to store your COVID test / vaccination status in. It was even officially available on F-Droid. I was very suprised at that point, and I'm happy to see that there are now efforts to make such behavior more default and less edge case, even when there are exceptions.
I'm curious who is the arbitrator for what's a valid security concern or not. If it's done by an independent group, it might make it harder to get around. If it's self disclosed, then yeah nothing will change
Idk if that would hold up in court. This law is completely dependant on the technical competence of the judges that will use it. It can be worthless, it can be strong.