A token gesture. Europe is extremely dependent on foreign tech. I don't see the political will to really change that. I think the main causes are corruption, incompetence, extortion (negotiations on trade, etc.), and short-term thinking of politicians and managers. People did warn them, but they were ignored. They fucked the citizens long-term. Treason.
Critical infrastructure, such as energy, healthcare, or train service, runs on US software and services and thus only works as long as the US allows it. In Germany, the German Railway moved all of their software services into US clouds and shut down their own data center. That didn't protect them from a recent DDoS, taking down their main customer-facing site for hours.
Meanwhile, the local job market abounds with job ads from government agencies and private businesses, requiring administrating MS software (AD, 365, Exchange), cloud and doing "Power"-stuff.
The study "European Software and Cyber Dependencies" [1] (Dec 2025) from of the European Parliament explains the dire state. It's full of money quotes:
"Non-EU actors, primarily US companies, control nearly all critical layers of Europe’s digital stack. These dependencies are reinforced by vendor lock-in, long-term contracts, proprietary formats, & network effects that limit switching and suppress market entry for EU innovators"
"80% of European corporate spending on software and cloud flows to US vendors."
"Public administrations rely heavily on Microsoft and Google productivity suites, with only isolated instances of migrations to open-source alternatives"
"A case study of the EU’s energy infrastructure provides a further illustration of how its digitalisation creates critical cyber dependencies. Industrial control, grid management, and market-trading software increasingly rely on non-EU vendors and cloud platforms."
"Such heavy reliance on US tech and vendors results in [...] tangible sovereignty risks. The CLOUD Act, FISA Act and US sanctions regimes give US authorities legal reach over data of European citizens and institutions hosted by American providers."
"Dependence extends across the supply chain — from chips and hardware (90% of advanced semiconductors imported) to developer tools and standards (GitHub, Docker, and major programming frameworks are US-governed);"
"The EU’s digital trade deficit exceeds EUR 100 billion annually"
"These outflows finance US R&D and jobs: according to one study, retaining just 15% of this spending could create around 500,000 jobs in Europe by 2035;"
"Lock-in inflates long-term costs and undermines innovation, while dependence on external platforms diminishes Europe’s leverage in trade and security negotiations;"
"Europe’s software and cyber dependencies are becoming a structural strategic liability. [...] without decisive action, Europe risks becoming a “digital colony”- dependent on others’ platforms, standards, and priorities for decades to come."
"[EU]’s deep reliance on non-EU tech is a strategic vulnerability. It exposes the EU to geopolitical coercion (a de-facto “virtual kill switch”), with potential cascading disruption across finance, health, energy and transport if access to […] cloud or key software is curtailed.
"In the current geopolitical scene, technology interdependence is being weaponised. External pressure can push the EU to dilute rules or face retaliatory trade measures, while dependence reduces Europe’s geopolitical leverage."
"the EU already faces pressure to dilute its own digital regulations to appease allies or avoid retaliation – recently, trade negotiators even been softening EU digital rules (like the new Digital Markets Act) in exchange for avoiding US tariffs"
"if a major US platform suffered a prolonged outage, or if transatlantic relations deteriorated, leading to data access blocks, a large swath of European business and government services could grind to a halt."
"semiconductors account for about 80% of the strategic value of a data centre; building AI campuses without European hardware will therefore send most of the value abroad"
[1] https://www.europarl.europa.eu/RegData/etudes/STUD/2025/7785...
If it can stop Hague prosecutors from having their emails deleted, then it's not exactly a "token" so much as it is a defensive mitigation.
[dead]