EU funds are flowing into spyware companies, and politicians are demanding answers