I don’t know who needs to hear this, but this (in the current report draft) is a very, very bad idea.

https://www.europarl.europa.eu/doceo/document/PEGA-PR-738492_EN.pdf

> Sophie in ‘t Veld
Vulnerabilities 

151. Without vulnerabilities in software, it would be impossible to install and deploy spyware. Therefore, in order to regulate the use of spyware, the discovery, sharing and exploitation of vulnerabilities have to be regulated as well [290]. Despite the strengthening of the defence of digital systems required and encouraged by the NIS2 Directive and the proposal for the Cyber Resilience Act, it is nearly impossible to develop systems without vulnerabilities.

…

290 Ot van Daalen, intervention in PEGA 27 October 2022; EDRi Paper: Breaking encryption will doom our freedoms and rights 
https://edri.org/wp-content/uploads/2022/10/EDRi-Position-Paper-Encryption.pdf
https://www.enisa.europa.eu/news/enisa-news/coordinated-vulnerability-disclosure-policies-in-the-eu