I know everyone here is obsessed with freaking out over the legislation.

But I think the author is wrong, they should just add this to accountservice and Debian will pick it up in 5-10 years and that’s fine.

I actually thing the tendency to over engineer this solution to make back porting easier is worse than the milktoast Californian law.