Europe is changing the rules again, this time quietly and profoundly. this week we have been busy analysing the draft  Digital Omnibus and Digital Package in Simplification as well as the new draft of the Market Infrastructure Package. The latter has been dressed up as an update, a fine-tuning of MiCAR (the regulation). It is being sold as progress, as a way to strengthen the single market and make supervision more consistent. In truth, it is none of that. It is a transfer of power, pure and simple.

The proposal gives ESMA (European Market Securities Authority) authority over every crypto-asset service provider operating in the Union. The language is deceptively calm, but the effect is sweeping. ESMA becomes the sole supervisor. National regulators such as the MFSA, AMF, BaFin, CNMV and CONSOB are left as executors of its mandates, able to act only when ESMA allows them to and only for as long as ESMA sees fit.

That is not coordination. It is command. Across Europe, national authorities have spent years building technical capacity and institutional knowledge. Malta invested early, creating a professional licensing regime that gave it credibility well beyond its size. France, Germany and Spain followed, adapting supervision to their financial culture and market reality. These efforts gave shape to a European mosaic of regulatory competence. The new proposal tears through that work as if it never mattered.

This is not harmonisation or simplification. It is absorption. Unlike the banking union, which still left national regulators with a degree of autonomy, this framework removes even the pretence of shared supervision. It makes ESMA the rule-maker, the supervisor, and the enforcer all at once. The national authorities that once embodied the spirit of subsidiarity are reduced to field offices.

The rhetoric, of course, is gentle. We are told this will prevent fragmentation, that it will strengthen stability, that a single supervisor will ensure fairness. The words are polished and familiar, but the logic is upside down. Supervision is not mechanical. It depends on context, judgement and proximity. A regulator in Valletta or Vilnius understands its market not through forms and reports but through people, habits and history. That kind of understanding cannot be replicated from afar. Once distance replaces knowledge, control becomes empty.

What makes this even more dangerous is the precedent it sets. If ESMA succeeds in taking full charge of crypto, other sectors will follow. The same reasoning will be applied to payments, open finance, digital identity, even artificial intelligence. Each time the argument will sound practical. Each time a piece of national sovereignty will be shaved away.

The European project was never meant to erase the Member States. Its beauty lies in the balance between unity and diversity, in the idea that cooperation strengthens individuality rather than replacing it. When Europe centralises supervision, it forgets that principle. It begins to resemble the very bureaucratic machine it once swore it would not become.

The irony is sharp. Crypto was born out of the idea of decentralisation. Europe's answer has been to respond with extreme centralisation. In trying to tame the risks of this new ecosystem, it risks killing the very pluralism that makes innovation possible. The smaller Member States, which have carried much of the regulatory experimentation so far, will lose the ability to act. Their role will shrink to implementing rules they had no hand in shaping.

Efficiency is the word used to justify it all. But efficiency without trust is a mirage. True efficiency comes from shared competence, not from hierarchy. When decisions are made closer to those they affect, they are made better. That is the meaning of subsidiarity, a concept the Union now seems content to forget.

Europe has a habit of pursuing integration by stealth. It calls it technical, administrative, procedural. Yet these are the reforms that change its character the most. A line in a regulation can shift more power than a treaty. Once accepted, the new structure becomes the new normal, and the national voice fades.

Regrettably this is not just a crypto story. It is a constitutional one. It asks whether Europe still trusts its Member States to govern responsibly. If not, the Union stops being a partnership and becomes a hierarchy.

Europe likes to speak of digital sovereignty, but sovereignty begins at home. A state that cannot supervise what happens within its own borders has no real sovereignty at all.

This package may look tidy and technical, but its consequences are political. They touch the foundations of Europe's legal order. The Member States should treat it as such. They must resist the idea that efficiency requires surrender. Cooperation is not weakness. It is the only way a Union of equals can survive.

The danger is not in the text itself but in the habit it creates. If we accept that every new problem must be solved by centralisation, we will end up with a Europe that speaks many languages but has only one voice, and it will not be ours.

Dr Ian Gauci is the Managing Partner of GTG, a technology-focused corporate and commercial law firm at the forefront of major developments in fintech, cybersecurity, telecommunications, and technology-related legislation.