The letter's central argument is that sovereignty must be defined by control, not by whether a provider merely has an EU presence. That means effective ownership of technology and protection from extraterritorial laws like the US CLOUD Act, which can compel American tech companies to provide data to US authorities, including data stored overseas, subject to legal process.