I am very much not a lawyer, and certainly not familiar with the Netherlands legal system, but IMO it seems like "created for the sole purpose of committing criminal acts" would be quite a high bar. Certainly I know of people who used Tornado Cash with no intent to commit any criminal acts, either seeking privacy in legal transactions or just DeFi yield farming the TORN token.