
Based on what I’ve read of the California law (AFAIK, the Colorado bill is nearly identical), Microsoft, Google, Apple, and vendors of other closed-source commercial software would be considered OS providers. However, vendors of FOSS OSes cannot control what changes the local administrator chooses to make to the OS. The “OS Provider” is the responsible party under these bills; for FOSS software, that person is the end user installing the OS, and not an upstream vendor.













It would be determined that the OS vendor who included such instructions was not making a “good faith effort” to comply with the law.
Without a “good faith effort” to comply, they become liable for “intentional” violation, which is a $7500 penalty.