alt Hacker NewsNot to forget the European Human Rights Convention as interpreted by the European Court of Human Rights (ECHR), although it's not an institution of the EU but the Council of Europe, spanning all EU states and then some.
The Court's case law is recognized as is by EU, and includes some landmark privacy rulings, e.g., against access to contents and metadata of electronic comms without a court order (or comparable legal safeguards), or any forms of bulk surveillance.
Yes, the court can overturn laws that are deemed to infringe on privacy rights but this path takes years. The last time a privacy invasive law was enacted it took something like 8 years to be overturned.
Are you willing to live in the EU knowing that for the next 8 years the EU agencies will have access to every single message, email and picture you send your loved ones just in case one of those could be CSAM?
Even if that was overturned, how will one know if he data they intercepted and illegally obtained will be destroyed or if the text messages you sent to your wife/husband are not going to end up sold to the highest bidder on the darkweb?