'ProtectEU' security strategy: a step further towards a digital dystopian future
edri.org
edri.org
Not sure why this isn't said clearly in the article. Unfortunately, not referencing original sources is common practice among European digital rights groups.
I know that this is the wording the EU itself chooses to put there, but no. They are not "voted upon". Parliament cannot choose a EU commission president. The council (the heads of state of the member states) put forth a candidate and if the parliament says no, the council has to select a president (this time ... without the parliament needing to confirm them)
Like anything else in the EU, the executive is in full control of
1) itself
2) law in the EU (the commission is the ONLY EU institution that can make laws, and yes, the essential part of that is that the parliament IS NOT in charge of EU law. It can neither force a law through nor can the EU parliament prevent the commission from enacting a law)
First of all, this is surprisingly hard, even for someone whose expectations were already pretty low; Similarly hard as it is to contact anyone from an actual company: you have to go through circular FAQs and robots and I ultimately had to write a small scrapper to get the postal and/or email address of the people of interest.
One month later I received one answer, from one of the ~20 people I mailed (which did not told me anything I didn't already knew, but reasserted that my concern won't move the needle - fair enough).