The $300 billion backdoor threat that Europe didn’t see coming