§ 202c is even worse:

> https://www.gesetze-im-internet.de/stgb/__202c.html

English translation based on the DeepL translation:

"§ 202c Preparing the spying and interception of data (1) Any person who prepares an offense under § 202a or § 202b by

1. passwords or other security codes that enable access to data (§ 202a (2)), or

2. Computer programs whose purpose is the commission of such an offense,

or by procuring, selling, transferring, distributing or otherwise making available to himself or another person, shall be liable to a custodial sentence not exceeding two years or to a monetary penalty.

(2) § 149 (2) and (3) shall apply accordingly."

The silver lining is that the punishment for crimes in Germany is generally extremely lenient. The article mentions a 3000 Euro fine plus legal fees.