What's particularly concerning is the metadata retention scope: "which websites you visit, and who is communicating with whom, when and how often" with "the broadest possible scope of application" including VPN services. This isn't about protecting children or fighting terrorism anymore - it's about normalizing mass surveillance through legislative attrition. Keep proposing it until opposition fatigues and it slips through.
The only sustainable solution is enshrining privacy rights into constitutional law with penalties for repeated attempts to circumvent them. Otherwise we'll be fighting Chat Control 4.0, 5.0, 6.0 forever.