It already violates Articles 7 and 8 of the EU Charter which is supposed to prevent stuff like this.

The reality is that they'll just keep pushing it from different angles, they only have to get lucky once, we (or EU citizens, we left and have our own issues) need to be lucky every time - much like an adverserial relationship where you are on the defending side from a cyberattack...funny that really.