On the contrary, I expect them to apply the law to themselves in the same manner they would apply it to, say, an important NGO whose IT staff have non-maliciously forgotten to update their stack. It is pretty common for large organizations, whether gov, NGOs, or corporate, to have issues where the left hand does not know what the right does. It is only a problem if these screw-ups are mission critical or if they stay unfixed for long. Mistakes happen, we should be judged by how we prevent the bad ones and how we act after they happen.

In the US a common version of this is for ADA laws on government websites. Many(most?) .gov domains aren't compliant. [1]

Interestingly, successful lawsuits for private company websites breaching ADA have increased over the past couple of years.

[1] Non-compliant: senate.gov , supremecourt.gov , congress.gov , justice.gov , etc