The Securing Open Source Software Act Is Good, but Whatever Happened to Legal Liability?