Can the Cyber Resilience Act make it illegal to retire?

I think this question could be framed in another, more relevant way: "Is a failed startup responsible to ship security updates for the next 5 years (Article 13, point 8) and provide binaries for every single minor update for the next 10 years (Article 13, point 9) after it failed"?

Hopefully not, but it looks like now you will have to set up an LLC just to try the tiniest business idea. Hopefully closing the LLC (even if it's just one person) would count as cessation of operations described in Article 13, point 23.

Or imagine a startup wants to experiment with another, adjacent product. Doing that introduces enormous risk of having to maintain a sunsetted product for years.

AFAIK none of this applies to SaaS. This act is the nail to the coffin for on-premises software. Everything being a subscription is already bad as it is, they have just completely destroyed the incentive to ship anything the consumer can run on their own machine.