Even then it was national governments, not the EU, imposing those controls.

I’m not aware of any COVID measures that was bought in solely via powers the EU has. I assume that would take far too long, as every new directive from the EU needs to implemented by each member state separately.