Europe’s digital sovereignty debate did not begin with AI or cloud procurement. It developed through surveillance disclosures, privacy law, cybersecurity regulation, platform rules, data governance, and sovereign cloud policy. For open-source platforms such as Drupal, the result is a more demanding environment shaped by hosting choices, supplier dependence, interoperability, compliance, and long-term control.