The six-month deadline to fix the consent screens and retention logs is the least interesting part of a ruling that quietly confirms governments are mandating surveillance infrastructure they haven't thought through.