Thanks for the clairifcation on the EU ballot initiative thing, that clears that up pretty well. The US sorta just threw the baby out with the bathwater in terms of departmental regulation but thats an entirely other can of worms.

Your second point about DDOSing, Thor comes from a cyber security background and the legality isnt as much of a factor, nor is he stating stating that this would make it legal. Security people have to treat it like "defense against the dark arts", if its possible to do someone will, therefore you have to be able to do it too to prevent it. He is stating that actors would DDOS things because they can, and potentially do so smartly to secretly ruin others enterprises by abusing the regulations if the get made poorly.

But your point clears that up a bit, the initiative has to be vague by design so that lawmakers/regulators can do their job should it pass its initial poll. I think Thor also has a point in that it if the final rulings are made poorly it opens the industry up to abuse. (see amazons patent issues as an example of companies and agencies not thinking things through)