Yeah, that's pretty much a "Karteileiche" though, nobody takes that law seriously. This has less to do with germany being overly restrictive in that domain and more with incompetence: The law says something like "possessing hardware/software suitable for hacking is illegal" those who have written this law probably barely knew what software even is. They wanted to make sure they can get those evil "hackers" convicted but misunderstood the nature of what they are dealing with.