“…the trust mark… centralizes authority in the hands of EU regulators and approved providers, potentially creating a system where only officially sanctioned entities can operate….”