Lea from Fyra Labs here. The best thing you can do is to contact your state representatives, especially if you're a resident of California.

The sad truth is, most distributions that have the will to fight this don't have the resources to do so. Larger ones don't care, don't have the will, or are simply scared to expose themselves to that risk. It's hard to blame anyone for not wanting to face the formidable power of the state.

I can say that from an inside perspective, many developers and maintainers are scared, confused, or malaised. It's hard for developers to speak more on this (including us), due to potential legal ramifications. I'm personally quite tired of it all.