“Article 45 forbids browsers from enforcing modern security requirements on certain CAs without the approval of an EU member government.”
eIDAS 2.0 makes browsers trust certificate authorities appointed by EU governments, some of them run by those same governments. It caps what browsers can demand of those CAs at whatever ETSI approves, and that cap could block Certificate Transparency enforcement. DigiNotar certificates were used to read Iranian email in 2011. Brussels wants to bring that era back and call it digital identity.
