The EU’s AI Act bans some “unacceptable” use of the technology but critics say the law is riddled with security exemptions.