There’s still valid concern about this being a foot in the door tactic. Once an OS complies with this request what will the next one be? Why should this even be allowed?

Either way though, the reddit citation is a bit unnerving.

I’m uninformed about this, but do KYC laws come into effect at some profit point or are they globally enforced. I don’t see how any small businesses could possibly afford a 3rd party audit, or how that would even scale. I agree it’s necessary, but logistically it seems problematic.

https://wiki.archlinux.org/title/Podman#Quadlet