Your one man company definitely is not safe, you’ll be responsible for all damages done by the full stack you’re providing.
Each library / OS / whatever software is part of your product.
Yes, this is bad.
The EU regulatory bureaucracy on tech, like all bureaucracies, does nothing but serve its own cancerous expansion.