It's not "ready for deployment". "the technology is ready and will soon be available for citizens to use"

Member states will either fork or redevelop their own apps around the proof-of-concept app. The app on Github that was "hacked" will never be deployed directly and that was never the plan either.

So far, this whole project has been an excellent way to gauge news outlets on whether they're trying to report the news or are just trying to win clicks through FUD and outrage. Most of them don't seem to know what they're writing about when they report about flaws and problems.