Well, EU at least isn't compromised like US governments, and still have some sense and its bureaucracy have some senses to prevent Big Tech taking over them, but because of the same bureaucracy and lack of and unwilling to look at opinions from the tech experts, many of their decisions are well, facepalm-worthy such as their upcoming root certs (like you said above) and CRA.