The EU's new age-verification app, which European Commission President Ursula von der Leyen said was "technically ready," has critical security flaws that security researchers can exploit in under two minutes by bypassing biometric authentication and accessing unprotected sensitive data stored on phones. The European Commission acknowledged on Friday the released version is actually still a "demo version" undergoing testing, directly contradicting its initial "ready" claim. Multiple independent security experts confirmed the vulnerabilities are in the latest live version, not a previous draft, raising questions about whether Brussels rushed the launch before solving fundamental privacy and security problems.