Maybe I don't understand all of the issues, but I'm gonna be as straightforward as I can: if you are a messaging platform doing explicit business in Australia under these rules, we have to assume you have or are willing to backdoor your software. It is a reasonable assumption that it will be hidden and that the backdoor is general enough for use outside of Australia (even if you don't explicitly deploy/enable it elsewhere, you wrote it, it exists). Therefore, if you do explicit business under these rules I have to assume you are compromised or are willing to be compromised.