I can’t see Apple getting seriously nailed, since they probably had no idea this was happening. But beyond shutting the companies responsible for selling these

I can’t see Apple getting seriously nailed, since they probably had no idea this was happening. But beyond shutting the companies responsible for selling these applications down, there should be some criminal liability for the executives. Exfiltrating users’ browser history without reasonable consent is a huge privacy violation. I wonder if it falls under CFAA.