Not all offensive cyber is military, although there's certainly ambition within the EU there. That aside, the EU didn't have a Cybersecurity Agency with legal powers to prevent and respond to cyber threats yesterday.
Coincidentally, it does today.
Baby steps I'm sure and with the imminent potential withdrawal of a 5 eyes member it isn't unsurprising. So this picture looks to be changing in the future.
