I don't have the answer to the last part of the question.
Having said that, there are indeed some great things about the proposed approach in the Military Programming Act 2019‑2025, including the concept of operators of vital importance, or OVIs.
In France, once it has been designated as an OVI, a company whose activities are related to a critical sector is required to meet a certain number of obligations to comply with the military programming law. This isn't a spontaneous declaration by the company; it's a requirement imposed by the state once the company has been designated as an OVI. This naturally applies to large companies, but it also includes small or medium-sized ones if they engage in activities related to a critical sector.