If we follow through with it, I would absolutely never ever trust anyone from the US, for example. US is very much known for cyber espionage and shady operations, and could absolutely backdoor Linux.
This is all power play, and it comes from a very certain direction amidst this political struggle.
You want your open source code not to have backdoors? Review it meticulously. This is really the only way, and the one an entire open-source community relies on - pretty successfully, by the way.
Kernel cannot follow or not follow any legal rules. Linux Foundation can.
And if regulations become a serious issue and go against the spirit of open-source, it is time to move the Foundation somewhere else.