This is only sort of a half-truth though. The SCC's are created by the European Data Protection Board, and it works for transfers to third countries because the

This is only sort of a half-truth though. The SCC's are created by the European Data Protection Board, and it works for transfers to third countries because the companies legally say "ok we won't do anything shady with your data" - but you have to actually prove that they can't be compelled to do anything shady under local law - which you can in the US. So the SCC's are a perfectly fine tool, but you just need more than that.