[fauigerzigerk]

Very true. They are effectively a new type of non-territorial state with absolutely no separation of powers or rule of law or principle of proportionality.

What makes this difficult though is that they are under constant attack from highly organised and automated criminal operations that create and exploit accounts en masse.

Any solution to the tyrannical state of affairs we are subjected to (even more so as developers) needs to balance better protections for real people (including as you say for people who have committed some transgressions) with fighting organised crime.

[mothballed]

It's also used by the actual territorial state to project power through corporations, by influencing them to project their policies. I'm reminded of the story of the guy that had his google account shut down for "CSAM" because they took explicit medical pictures of their child at the directions of physicians, that were only privately shared solely for the purpose of aiding diagnosis. Apparently google works with the government to create these systems to scan your cloud images in the background.

[fauigerzigerk]

Yes, I think governments love centralisation of control in very few hands. It gives them far greater powers than they would otherwise have, both technically and legally.

"Harmful" content has significant overlap with freedom of speech, so governments find it hard to ban directly. But when there's a big corporation facilitating access to that content, then it becomes a clear case of "evil capitalist profiting from harmful content - corporations need to take responsibility!".

When a government doesn't like end-to-end encrypted photos and cloud drives, all they have to do is issue a secret order telling Apple to disable it.

And when people find workarounds for intrusive and insecure age verification methods, what's better than a total sideloading ban to regain control?

[NotPractical]

> governments love centralisation of control in very few hands

Honestly, that was one of the things that shocked me about the Digital Markets Act in the EU. It gives them less power over their citizens, not more. (Of course, they also passed the Digital Services Act around the same time, and now they're looking at age verification and breaking E2EE, so I guess they figured they had to balance things out...)

[fauigerzigerk]

I think these are separate initiatives by different parts of EU agencies and national governments. The markets and competition crowd does not coordinate at all with the law enforcement and security people.

I don't mind this being a bit chaotic. At least it shows that there are trade-offs.