The law...
But seriously, it's not meant to spy on you or me. It's meant for 90% of the population who can't install an .apk and don't know the difference between a web browser and a search engine. They'll just download facebook messenger from the play store if it doesn't come already pre-installed with their phone and won't even know that this law is a thing until they get arrested for sharing pictures of their sick kid with the family doctor or political dissent terrorism once it gets inevitably expanded to other things than csam.