AI regulation in the EU: what is the right mix?