Contrary to popular belief, the EU is not very fast when it comes to enforcement on requirements like these. We already saw this with the ePrivacy Directive and GDPR: those scary hundreds-of-millions-of-euros fines are only handed out after ongoing and deliberate violation, where you've already received plenty of warnings and smaller fines.

18% compliance after one year with zero enforcement is not great, but it's already a massive increase over the near-zero repairable products we had only a few years ago. On top of that it is 18% of models, so there's a decent chance that a huge chunk of the noncompliant ones are obscure brands with near-zero sales: a handful of models by Apple and Samsung already add up to over 60% market share. And the report was literally written by iFixit, so there's a rather clear commercial incentive to underrepresent it and push for the strongest enforcement possible.