The EU AI Act has arrived and we're at a crossroads: do we wait for regulations to guide us, or do we start asking the hard questions now?