EU media law enters home stretch but spyware, disinformation