Framing every child-safety push as unambiguous good ignores where the EU's regulatory machinery is actually headed. The proposed CSA Regulation would force client-side scanning of encrypted messages — what the EU's own legal service called general and indiscriminate surveillance — and once that infrastructure exists, mission creep is inevitable. Real child protection means targeted policing and funded enforcement, not suspicionless scans of everyone's private life.