E2EE is not supposed to protect if device get compromised.

Mullvad is the best VPN

Yup, you are right. Phones will keep collecting data point. It will upload as soon as it gets connected. But location can still be provided near realtime via Bluetooth on newer Android and iOS devices. This will happen even if device is offline.

It’s highly likely that these laws will be passed because more people are voting for right wing leaders in EU, Right wing heavily supports this. If EU sets the example soon the whole world will follow.

Doesn’t using a particular wordlist limits choice, gives attackers a wordlist to generate the password from