Maestro

That’s a given I think. If you can’t trust the OS then you can’t trust the client.

With e2e you don’t need to trust the servers. You only need to trust the client that does the encryption.

MitM: Meta-in-the-Middle

Not really. They just announced they want to age gate VPNs too.

Per another commenter (and the article):

When the battery dies, the glasses continue to function as a traditional pair of single-vision specs, ensuring the wearer is never left in the dark or have safety compromised such as when driving or operating machinery.

Are these the auto-focus ones? If so, that’s surprisingly slim… If there are no other components.

If website operators didn’t want to ask for consent, they should stop trying to profit for your behavioral data. But they want to sell your data and have de it from you. That’s the only thing not allowed. There are plenty of sites that use cookies and don’t need to show a consent banner.