You might have missed the part where this is already scaring Theo de Raadt, to the point of recommending EU users not use openSSH anymore.

How many here are confident of writing software as securely as Theo?

edit: I still think this is going in a good direction, but at this stage this kills a lot of small businesses, startups and open source.

Requiring certification for every release means killing off most software, let alone the fees. Forget multiple supported releases or LTS, everything will be rolling release.