I filled the technical part of a certification to host personal health data for my first company (bunch of ISO certifications plus background checks, authorization to come at my place to take any storage device, including phone and computer, and also a bunch of columns to fill). Friction was strong for like 6 month, and present for two, but our customers never felt it hopefully.
>Government are there to prevent friction for its citizens, not for faceless entities.
Have you ever tried to get a safety critical system certified by a government authority?