The UK already did that iirc. Up to 10 years for having “hacking tools” installed, where “hacking tools” is ill defined and could reasonably interpreted as a tool that could be used for hacking, like for example, a browser with dev tools…