This would essentially take us back to what online services were 20 years ago, by outlawing a business model that relies on providers controlling stuff on users' devices. What's on the server is the company's business, what's on the client is the user's, and the boundary is clear. On the one hand, services that would persist would likely no longer have free tiers (which would essentially mean free lunch for customers); since it's a commercial service run by a company that has costs, it's just normal to pay for it as a user, there's no free beer anywhere. On the other hand, by paying for something, you'd get that thing and nothing else, as there's always going to be a client that doesn't leak data not necessary for the service to perform whatever you paid for, or impose arbitrary restrictions on its use. If any, these need to be server-side.

Things have been changing a bit in recent years. Since the "debit" and "credit" nature of the card is now written on them, French folks have started to request "credit" ones for travelling (to rent a car for instance).

My understanding is that for car rental purposes, anything using Visa/MC (and not a national debit network like Visa Debit in the US) will work, it doesn't actually need to be backed by a revolving credit. At a US gas pump, a Frenchie needs to select "credit" even though the card has "debit" written on it. Still, should the clerk refuse the card because it reads "debit" without running it... better have this "credit"-labeled one.

Lastly I even faced another one. Something as simple as a gym token wants GMS, attestation and GPS positioning because it treats its users as liars prima facie. That's the new norm this attestation enables. No conspiracy needed, simple business interest and greed to juice "customers" to the last penny drives you there.

This is very commonly true but sadly not 100%. I am suffering from a shared /64 on which a VPS is, and where other folks have sent out spam - so no more SMTP for me.

I would love to use that technology to do reverse attestation, and require the server that handles my personal data to behave a certain way, like obeying the privacy policy terms of the EULA and not using my data to train LLMs if I so opted out. Something tells me that's not going to happen...

This is true. One thing I note is that with the same dollar amount, you get even less legroom, luggage, etc. today than you used to back 10-15 years ago on traditional airlines. Granted the airline costs rose over time, but it's hard to imagine they went up to the scale traditional airfare has increased at equivalent service levels... Also the fact that things that used to be included are now considered "extra" looks like a good excuse for folks to complain about.

Stadtbahns use the "U" sign for U-Bahn when only part of their network is underground; I guess this is to avoid confusing riders.

Assuming there isn't and blocking them will break applications. I realized my local resolver validates DNSSEC when I went to a place that did not forward RRSIGs, making me unable to access the Internet over there.

I'm also thinking of 2FA things many corporations mandate, requiring the use of a phone number, application or both, without them handing you a work phone. Under no circumstances will I give my personal phone number to Google or Microsoft because I don't want them to link my work and personal stuff. Right now, I'm locked out of a corporate account at Google due to such refusal.