In general, there is a high risk that the law will end up being extremely complex. The risk categories in the Commission's text, in particular, will quickly lead to mandatory maximum-risk mitigation measures (such as scanning and age verification). https://www.eff.org/deeplinks/2025/12/after-years-controversy-eus-chat-control-nears-its-final-hurdle-what-know
After Years of Controversy, the EU’s Chat Control Nears Its Final Hurdle: What to Know

After a years-long battle, the European Commission’s “Chat Control” plan, which would mandate mass scanning and other encryption-breaking measures, at last codifies agreement on a position within the Council of the EU, representing EU States. The good news is that the most controversial part, the forced requirement to scan encrypted messages, is out. The bad news is there’s more to it than that.

Electronic Frontier Foundation

@eff The counter if we lose the political aspect of this fight is obvious: stop hosting ANYTHING in Chat Control compliant countries. Stop using any site or service that complies.

At the user level, close or abandon any account or app that asks to scan anything or to verify age. Note that Signal is all but guaranteed not to comply and if they somehow are successfully blocked or shut down, peer to peer messaging won't be complying either. Get rid of Facebook/Google/Youtube/Musk-Twitter/Tiktok etc, and dump the Google Play store (and iOS if they comply) as well.

If Android phones try to bake this in at the user device level, it cannot go into the open-source AOSP part of Android or it would be easily reverse-engineered and bypassed even without having to recompile the OS. Thus it would probably go into Google Play Services and/or the Google Play Store client Disable those and replace all the Gapps, and this shit is gone from the device and probably the ban on "unapproved" apps as well. Play Integrity (keyword "Play") is part of the closed source Google Play addons, and descendents of it will also be.

Also any phone can be used as a dumb wifi hotspot with no contacts, apps, or on-device Internet activity at all. Nothing for Google and the cops watching Google to see here! It's all on the tethered laptop running Linux, which they have no way to control.

Lock down new computers? Computers last a lot longer than phones and even old Core 2 Duo stuff is still usable for most internet surfing such as those darknet porn sites with no age verification. By the time all "pre-ban" computers are gone, every politician that voted for Chat Control in the EU and age verification in the US will be out of office.