A cybersecurity law is drawing criticism for the legal voids it leaves behind. The case against it is put bluntly: a law that fails to give legal certainty does more harm than good. On that logic, critics argue the better course is a veto rather than letting the poorly drafted statute stand. The complaint is that, as written, the measure settles too little about where the rules of cybersecurity actually begin and end.