Could someone with strong background in this area perhaps shine a light on this? Is this essentially the EU empowering its constituent nation states to deeply

Could someone with strong background in this area perhaps shine a light on this? Is this essentially the EU empowering its constituent nation states to deeply compromise security practices? Or is this just basic capability building for mass communication surveillance? There is little a private man can do against state actors. Of course, I could operate my encrypted backups with my antique Raspberry Pi in a Faraday cage. But … really? Also, how does this not backfire when taking account third accounts?