Well, for now most people do trust the states and don't know the implications of this. The EU could have just as well modified e-commerce and other pages before

Well, for now most people do trust the states and don't know the implications of this. The EU could have just as well modified e-commerce and other pages before everything was encrypted. I also don't know how certificate pinning is impacted by this (which would mean that simply creating another cert from a EU root cert would at the very least be noticable)