They argue that they are a coverd application store.
'Definition: "Covered Application Store" '"Covered application store" means a publicly available internet website, software application, online service, or platform that distributes and facilitates the download of applications from third-party developers to users of a computer, a mobile device, or any other general purpose computing device that can access a covered application store or can download an application. — Cal. Civ. Code § 1798.500(e)(1) 'This website is a "publicly available internet website" that "distributes and facilitates the download of applications" (specifically: a bash script) "to users of a general purpose computing device." We are also a covered application store. Debian's APT repositories are covered application stores. The AUR is a covered application store. Any mirror hosting .deb files is a covered application store. GitHub is a covered application store. Your friend's personal website with a download link to their weekend project is a covered application store.'
Yes, I know that. I'm saying this is utterly futile and if they really wanted to accomplish something they'd structure themselves as I described above. If their goal is to highlight the absurdity of the law... they won't actually accomplish anything. The Attorney General is not going to magically decide this was a terrible idea and reverse course. If they want to change the law then this isn't the way to do it either. If they want to ensure business as usual then what I propose is one way to do that.