On Friday, French privacy watchdog CNIL said the legality of Worldcoin's approach "seems questionable."