They're presumably claiming that european devices will be less secure.
I assume this was how it was intended to function, but the kind people that run internet websites intentionally made it more difficult.
Lots of smaller players still do it, though, so maybe this is not the most effective enforcement style.
European DPAs aren't getting enough funding to take on this problem, but they haven't been sitting still either.