just for clarification, it seems that the new policy took effect this past August (2 months ago), I'm I correct?
Also, it seems they're using Cloudflare to scan unencrypted rooms? but to me that doesn't really matter much..what matters is the fact that they recognize it's an authoritarian law, and still leveraged an existing technology (offered by a company that no dev should trust or use) to overcome this hurdle.. It makes me question their commitment to privacy.. why? Because if you comply with a bad law, it signals to the government that you're able and willing to comply with future bad laws.. they will give you just that.