And that person has to have come up with this on their own

Why is this a requirement?

Plenty of people who would use privacy-respecting, free software that a tech-savvy friend likes and uses will now have to go through this process and probably decide it isn’t worth it.