The EU is already doing this with their government mandated Certificate Authority. The EU has precedent that it can demand any hardware or software changes for any products sold in Europe no matter how insignificant.

We're already sliding down the slope: https://www.infosecurity-magazine.com/news/eu-eidas-face-backlash-mozilla/