We need an EU regulation to mandate that all internet-connected devices must have a mechanism to disable internet access entirely and remain functional indefinitely, at whatever capacity is technically possible.
Want to have an app to control your dumb gadget? That fucker can use bluetooth, there is no legitimate reason to require at account on the vendor's website, which they can block at any time, harvest data from at any time, get hacked, and also make your lightbulbs unable to turn off if us-east-1 is down.