your mindset is not based on reading the EU proposal word for word. its not even based on an interpretation from the "last chance" and "open letter" which is FEARING things it has not proved.
the details of the open letter and "last chance" site say mostly about the closed source/closed door nature of the extension widgets browsers are suppose to include.. with unproven fears of back doors possibility..
yes the 500 IT guys that call themselves "scientists" (much like how gavin and gmax call themselves "scientists") have an unproven fear that the closed source extension wallet may include other things..


but YOUR topic here has a title thats that is not even about that.. you have doubled down on a misinterpretation of a misinterpretation that is not even about the word for word EU proposal.. so you got an even more warped mindset from some other source that took a warped mindset of the actual EU proposal and double warped it.

...

if you understand security. no one wants a service to be open source, because hackers could find exploits.
EG customers of CEX dont want their service hacked

bitcoin succeeds in open source due to decentralisation removing central points of failure for most parts.. but certain services cant operate openly

EG
imagine that this was your ID
7ec97ec1d843369e34b97035a97f1e1e68f29725e20f5b6c1ae9e1c3a24287e8

now looking at that its not obvious how thats provably you.. and i have no way for me to know how to forge the ID

now imagine the ID creation method was revealed.. wherebyt YOUR EU gov id was for instance sha256 hashing this:
[name][birth country][colour of your internal house walls]
by hiding how they form the ID is good security as it stops me from forging your ID
but now i know how.. i too can forge your ID

[angelo][greece]
7ec97ec1d843369e34b97035a97f1e1e68f29725e20f5b6c1ae9e1c3a24287e8

yes i understand closed source is bad for other reasons.. causing many POSSIBLE fears..  but you have to understand the reasons why closed source is used..
possible fears is different than finding actual skilled reviewers actually finding actual exploits

the actual EU proposal says they have their own vetted devs that review the code and ensure its clean (much like how core prefer their own devs to review code and 'ACK' it, but dont like outsiders scrutinising, reviewing and commenting on the code