A few others have mentioned this. The EO is tailored towards those outside the US and is a response to overwhelming cyber attacks. Sanctions are one of the US's tried and true international political weapons. They aren't going to be sanctioning US researchers, nor US-allied parties. The EFF seems to be confusing what is an EO targetting Chinese and Russian hackers and their funders with civil law? The EFF is normally very careful about these sorts of distinctions - so I'm very confused.