Be interesting to see if the CMA has teeth here, its dealing with a big multinational that is not headquartered in the UK.
Will it make any difference or will Meta pull services and wait for the masses to scream at the authorities to rethink the situation.
Seems very like the no default password rules mulled, great on paper but you wonder how it will work in our global reality.