Why would the EU want an EU company to make a phone OS with a massive privacy flaw?