Cybersecurity Act - Consumers need mandatory security by design and by default