TFA seems to imply that under the proposed rules, none of that careful analysis will matter. A software "vendor" is liable and that's the end of the story. Microsoft or GNU foundation, doesn't matter
TFA might of course be wrong, but otherwise, my concerns stand I think.