Obviously the standards should be in concordance with how critical the infrastructure is. I thought that went without saying. I'm just trying to ask if we should expect working on critical infrastructure to be "fun" and not burdened by regulations.
To be fair, I haven't read the actual draft, just read some reporting about the implications for open source software.