Commercially supplied open-source crypto wallets should be exempt from the Cyber Resilience Act