That's the neat thing about laws. You just put them in prison until the replacement does comply.
Honestly, the OS that prides itself on "Only two remote holes in the default install, in a heck of a long time!" is not going to introduce a remote hole on purpose, that'll be one cold day in heck.
This is really the least thing to worry about.