The Covered List Is a Club, Not a Wall
The Covered List Is a Club, Not a Wall
The FCC banned DJI drones and TP-Link routers, then immediately started handing out extensions. The Covered List is not a wall. It is a toll gate.
On May 8, the Commission's Office of Engineering and Technology released a fresh waiver, DA-26-454A1, pushing the update cutoff for foreign-made drones from January 1, 2027 to January 1, 2029. For routers, the previous deadline was March 1, 2027. Same new date. The waiver also expanded what updates are allowed: previously only minor Class I permissive changes qualified; now Class II changes, which include actual security patches and vulnerability fixes, are also permitted through 2029.
This is the third extension in twelve months.
The FCC's position is that bricking tens of millions of consumer devices creates its own national security problem. Fine. But the cumulative pattern reveals something the original ban announcement did not say aloud: the Covered List was never a hard stop. It was a compliance-fee structure with a clock, and the FCC keeps resetting the clock.
The deeper architecture becomes visible when you look at who has already paid.
Amazon's eero and Netgear received conditional approvals from the Department of War and the Department of Homeland Security months ago. eero's exemption runs through October 31, 2027. Netgear's covers the Nighthawk and Orbi lines. The FCC's own Covered List page, updated May 6, 2026, shows conditional approvals for Air6 System, Mobilicom, SiFly, ScoutDI, Verge, and Sees.ai, alongside older grants for Calix and others. These companies are not caught in the ban at all. They moved early, filed the right paperwork, and got through the door.
TP-Link has not received a conditional approval. According to PCMag, the company told the FCC it is investing "hundreds of millions of dollars" to apply for one. That is the price of entry: not a legal prohibition on the technology, but a compliance cost significant enough to function as a barrier to market entry for smaller foreign competitors.
DJI has received nothing. The company is fighting on two fronts simultaneously: a petition for reconsideration before the FCC itself, with public comments closing May 11, and a parallel lawsuit in the Ninth Circuit Court of Appeals challenging the commission's jurisdiction. While TP-Link pays to get in, DJI pays to fight the lock.
The FCC is aware it has built a club rather than a wall. DA-26-454A1 states that OET "plans on recommending that the commission consider codifying this waiver through a rulemaking." That language is notable. A codified waiver would not be an exception — it would be the standing structure. Existing devices of any nationality that pass through DoW or DHS conditional approval would retain update access indefinitely. Everyone else runs on a waiver that the FCC extends when the political cost of bricking American consumer electronics becomes too high.
What this means in practice: if you own a DJI drone or a TP-Link router today, you are not cut off. Security patches are coming. But the structural winners are not the consumers holding these devices. The winners are the companies that already have conditional approvals and will face less competition from new market entrants during the waiver period. The rulemaking signal suggests the FCC is leaning toward making that advantage permanent.
The May 11 comment deadline for DJI's petition is two days away. Whatever happens then will not resolve the underlying question: whether the Covered List is a security measure or an industrial policy instrument dressed in national security language. The extensions suggest the FCC itself is not entirely sure.