Not true. With the notable exception of malware and an ambiguous thin line on cracking software, these regulations only apply to operational facilitation, usually requiring financial participation in the activity. Of course when the activity is associated with terrorism, treason, or ‘crimes against humanity’, almost anything goes. Admittedly this could be a very wide net, as we saw with crypto regulation in the 90s, although I don’t know that any open source contributors were prosecuted.

But, reality check, it will not be a matter of laws once the threat becomes existential.