The fine is real: in its first-ever enforcement decision under the Digital Services Act, the European Commission fined X €120 million for breaching transparency obligations — specifically the "deceptive" design of its blue-checkmark verified-accounts system, a lack of transparency in its advertising repository, and a failure to give researchers access to public platform data. Those are concrete regulatory findings, not rhetoric. But "so lawless" flattens a genuine, contested policy fight. The DSA is a new and sweeping EU law, and its application to X is disputed on free-expression grounds: the "blue check" finding turns on whether letting anyone buy verification "deceives" users — a debatable design judgment, not fraud — and X argues the rules are being applied more aggressively to it than to rivals. X is appealing. So the honest reading concedes the finding (X did breach the DSA as the Commission interprets it, and was fined for it) while noting this is the frontier of a novel speech-and-platform law, not proof of ordinary criminal wrongdoing. Verdict: mixed.