I think the new law is intended to simply force the service provider at the far end to provide the back door, not only the intermediate links/ISP. Or perhaps force the user end software to be compromised by an 'update' from the official provider.

Once you cannot trust the providers of the far end services or the tools/apps you use at your end, it gets tricky quickly.