It's a mechanism to legally force web browser vendors to install government issues root certificates (which they already did btw). And EU pinky-promises that not a single independent EU member won't use them to do MITM attacks on their political opposition and journalists. Like Orban 2.0 or Fico won't use Hungarian or Slovak root cert for nefarious purposes, no-no-no. It's only to protect the children, see, and definitely not to help murder journalists investigating drug smuggling cover-up. :)