Exploting bugs to gain unauthorized access is a crime regardless of who does it. If the crime happened on EU grounds they have to asnwer to EU. That particular company should have trading sactions imposed on it just like the country it belongs to. We do the same for Russian hackers so it's only fair to apply that to everyone else.

EU is the modern equivalent of Soviet Union and it behaves like that. They do a ton of stuff wrong and they take decisions without any regard for the local culture and people. This has nothing to do with illegal access to other peoples devices.