Spyware and state abuse: The case for an EU-wide ban