DSA's replacement, named the Cyber Security Act (CSA), is already another disappointment.