This just sounds like a bunch of vaguries that could be written about any framework. And React works fine for small projects. There’s no need to loop in a bunch of dependencies like css in js or graphql either I’ve been using it for years.
Either way, I could see some valid use cases, I don’t like them but I don’t see how they’re any different to a human reading a script or recorded message. Bad actors won’t be stopped by this law, so it seems like pissing in the wind.
I get your point but also this is what whistleblower laws are for. A lot of times it’s in the company’s best interest to comply… until 50%+ of the population opts out