Mandatory cyber-resilience certification for DeFi protocols goes too far in restricting decentralized innovation