Obviously this decision is political- it's expressly because of sanctions. You are raising a "what about" question here. "If you do this then what-about that?"

Obviously this decision is political- it's expressly because of sanctions. You are raising a "what about" question here. "If you do this then what-about that?" Or perhaps "before you do this perhaps worry about that." But these issues are completely unrelated. One is political (and trivial to deal with) another is technical (and a vastly bigger, and more complicated topic). For starters if congress set out to "prevent spyware", I'd suggest they lack the skillset to even define "spyware" much less the technical expertise to effectively ban it in some way. I certainly would not expect them to somehow ban "spyware" whole at the same time leabing all "not spyware" unaffected.