[jamedjo]

First thought was that people would protest this by flooding the relevant department with product updates, maybe triggered on each commit. Then I noticed the caveats:

- Updates don't count: only significantly large changes need disclosing.

- Can't be forced on companies with fewer than 10,000 users. Maybe commercially led open source products could claim that users are spread across many forks each with fewer users.

- New product disclosures only applies to communications companies already forced to backdoor existing products. Maybe we'll see companies akin to Alphabet evading the need to backdoor new products by forming separate companies.

Overall I'm more worried by the requirement to backdoor communications than having to disclose new services. Security shouldn't be sacrificed. Additionally the gagging order would prevent companies from being honest with their users as well as making it harder for them to fight against it.