Isn't this part of the same amendment that will make government spyware mandatory on all devices? So does that mean that part passed as well? VPNs are not the most concerning part here yet that's the only bit that seems to be getting reported
The “CSAM requirement” is that any relevant device supplied for use in the UK must have installed tamper-proof system software which is highly effective at preventing the recording, transmitting (by any means, including livestreaming) and viewing of CSAM using that device
So that means mandatory spyware and effectively makes alternative OS's/unlocked bootloaders illegal