The European Union’s Cyber Resilience Act (CRA) is often described as a compliance framework but in reality it is far more ...