> I will be surprised if the EU CRA results in more F500 companies entering suppport contracts with their major OSS dependencies, but that would definitely be the ideal outcome.

If it's made simple enough (with an EU legal entity), I see it quite likely.