Why do I get a feeling that such a policy would be poorly implemented by people who have no idea about cell phone operating systems? It would be a "security the

Why do I get a feeling that such a policy would be poorly implemented by people who have no idea about cell phone operating systems? It would be a "security theater" with nothing to show for in terms of actual security. Furthermore, these certifications would give the public false hope of security while their data is being siphoned in exactly the same way before the regulation. GDPR: Strictly speaking as an average user who doesn't care about privacy - all they got is a cookie banner annoyance from GDPR. They see no benefit of regulation in EU. Sure, people on HN care about privacy and support this - but vast majority of people find GDPR laws a complete nuissance. Businesses implement the provisions in half-baked fashion because its expensive to be fully GDPR compliant. EU regulation is a shitshow and usually poorly thought out. Intentions are good but when it plays out, it is a disaster for users and businesses alike.