EFF's editorialized headline is not meant to be interpreted literally. Quoting directly from the verdict

> password-protecting the internet connection, provided that those users are required to reveal their identity in order to obtain the required password and may not therefore act anonymously

The whole question by the way was not settled by the court but referred back to lower instances and is not something that will have to be answered uniformly across the EU. The court merely found that such a law would be allowed under EU rules.