Deeply worrying, yes, but not unexpected.
> This is because through Article 45.2, the legislative proposal, in effect, mandates that browsers automatically include Trust Service Providers (TSPs) in their browser root programs.
I haven't read the law in question but I would take "mandates" to imply that doing the opposite is somehow prohibited by the proposed law.
Why should a foreign country have control over my interests?
Why should Mozilla DECIDE what I should and shouldn't trust?
I am very glad that the public opinion decided to not trust Firefox at all (3% market share today)
For example, imagine if all big browsers everyone uses where made in China, and mostly just trusted Chinese CA. Do you think that would be a problem? Do you think the rest of the world would just let that happen instead of starting to regulate it? That is the situation EU faces right now with American browsers.
EU is safe in that way since the people making the legally binding laws to enforce them aren't the same people making the EU laws, so everything has to go through at least two levels of elected representatives to actually take effect. This means that if EU wants to spy on you then your country can block it, and if your country wants to spy via this system on you then they have to get approval from EU at least. Either way EU is an improvement over just having your local representatives.
The EU itself says so:
- https://ec.europa.eu/info/law/law-making-process/applying-eu...
- https://ec.europa.eu/info/law/law-making-process/applying-eu...