The EU has begun reviewing Cybersecurity Act 2.0, banning tech that uses parts from high-risk vendors across all supply tiers. Relying on the primary vendor alone fails when sub-chips are unvetted. Companies must audit every component, down to the raw circuit board.