There was no lesson to learn, this is how it works. It is made illegal, then extra illegal, then no costs are levied for prevention, only for prosecution.

The law does not prevent attacks it lowers cost of prosecution by clearing up the ambiguity about whether this was illegal.

I'm not sure I love that, but that's how it always seems to work. Otherwise it's just another "job killing regulation".