This seems like the perfect case for legislation that starts out targeting higher volume devices/larger companies and lower over time.

I don’t see why the industry couldn’t move to providing this documentation/full source over a few years.