Does EU really have any real security apparatus independent from it's member states as such that it would really have a need for something like this?

Also ChatControl is something being pushed by Denmark and other ideologically similar countries not necessarily the EU itself as such.