Although the U.S. government has focused on concerns that Chinese tech company Huawei might help supply intelligence to authorities in Beijing, the list of 5G’s potential cybersecurity vulnerabilities is longer than a single company or state actor. This month, the European Union’s member states issued a joint report (PDF) that highlights 5G security challenges, without naming Huawei. The more software-defined and less centralized nature of 5G networks opens them up to previously unseen threats, the EU warned.

“With 5G networks increasingly based on software, risks related to major security flaws, such as those deriving from poor software development processes within suppliers are gaining in importance,” the 33-page report reads. “Due to new characteristics of the 5G network architecture and new functionalities, certain pieces of network equipment or functions are becoming more sensitive, such as base stations or key technical management functions of the networks.”

The EU isn’t alone in calling out the different risks under 5G. In September, a report by the Brookings Institution, a center-left think tank, cautioned, “The hyperbolic rhetoric surrounding the Chinese equipment issues is drowning out what should be a strong national focus on the full breadth of cybersecurity risk factors facing 5G.”

The Brookings report ranks the decentralization and software-based nature of 5G as its top cyber risks. That’s followed by the vulnerability of the software managing the networks, the new targets presented by the vast growth in bandwidth that enables 5G and the “tens of billions of hackable smart devices” that will connect to 5G as part of the so-called Internet of Things. While the tighter encryption and improved user verification of 5G are broadly expected to be a step up for cybersecurity, the IoT will probably be “the weak link,” reports The Financial Times.

Devices from cars to baby monitors are increasingly connected to the Internet, raising new concerns. Dan Bieler, principal analyst at research firm Forrester, told the FT, “The sheer number of connected assets and devices heightens security challenges.”