Yeah I think it went well. They also seemed concerned that harmless apps that don't geolocate or collect private information (@snow mentioned compilers) are getting swept up in this. Tools that engineers rely on to keep the software infrastructure humming.
I mentioned that, for the general public, OSS is like plumbing in your house: you only learn about it when it doesn't work. Like when Equifax got breached in 2017 for not updating Apache.