My understanding is that the certification work by FAA was simply trusted by EASA, and it was just carried over.
The FAA in turn had been systematically delegating parts of the certification back to the manufacturers themselves, and obviously have not provided enough oversight.
After the crashes the EASA have obviously determined they need to redo the verification work themselves.