To be clear, I still think the law is dumb and poorly thought-out, but not because it increases surveillance or compromises privacy. It’s just so ridiculously broad and completely ignores the fact that majority of internet queries are server-to-server and aren’t even seen by any user.

What I really don’t get is why there’s no specification of content sensitivity. Isn’t that the entire point of this? Like if the software never accesses any age-restricted data, then it should be categorically excluded from this requirement.

It really feels like the writers of this law never considered the fact that “software” means anything beyond apps from iOS or Android.