Understanding the Implications of the Cyber Resilience Act