EU Cyber Resilience Law Could Harm Open-Source Software and Information Security