Can open source be saved from the EU's Cyber Resilience Act?

The road to Hell is paved with good intentions, and for open source this is a well meaning cluster fudge