"If enacted, the SSBA would mark a significant step toward providing that oversight, accountability, and transparency, which is sorely needed as harmful uses of bossware proliferate."