“The European Cyber Resilience Act is expected to impose significant compliance costs on companies.”