I remember the GDPRpocalypse which had a lot of Americans up in arms because of the wildly different approach to lawmaking that the EU has. Everyone on the US side was screaming for a checklist they could implement, and assumed they would get maximum penalties if they didn't cross every t and dot every i. But it just doesn't work like that, EU laws are generally not very procedural, they are a lot more about intent.

These findings are very much in line with that, they bring up a feature, a checkbox, a specific thing TikTok did to pay lip-service to protect minors, and then they're simply saying that it doesn't appear to work. So it doesn't matter that TikTok checked the box and crossed the t.