It is pointless exception. If chat control will pass, everything is vulnerable by design. Or how do you distinguish if WhatsApp is installed on a phone of Joe Nobody or or a phone of a politician? You won't, unless you have some list, which can be leaked and from "do not touch credentials" will turn "target these credentials"