[izacus]

And if FOSS is not a business, it's excluded from this regulation as well.

If you make business with said FOSS you need to provide security just like how a food truck making food from open recipes has to make sure to not poison people either.

[bioemerl]

What if I provide it for free and a business starts using it?

[hyperman1]

What if you give self baked cookies to a restaurant owner, and he sells them? Then the commercial entity assumes the risks and is supposed to safety check them.