Curious how they plan to handle encrypted attachments — scanning has to happen either before encryption (client-side) or after decryption (server-side). If E2EE is preserved end-to-end, there's literally no point in the pipeline where a third party can scan without the client's cooperation. So either E2EE breaks, or the law is unenforceable by design.