Yeah, even if it doesn't become a legal requirement, I could imagine companies asking for FSBoM's from their suppliers -- so it ends up being a requirement anyway if you want to compete with big co's.