The EU requirement isn’t actually USB-C. It’s whatever USB-IF says is the standard connector. So if USB-C gen2x2 (or wherever they will call it) comes out, that will be what everyone has to implement.
The problem would arise when USB-IF stops being the de-facto innovation driver for peripheral interconnection.
Relaying sensitive information over your own wires are a lot more secure then a privately owned service from a foreign country. It’s just a lot more cumbersome.