What does this accomplish versus directly banning the collection and exfiltration of data by foreign actors via consumer products? Like just make it illegal for

What does this accomplish versus directly banning the collection and exfiltration of data by foreign actors via consumer products? Like just make it illegal for products to unilaterally and automatically upload broad swaths of sensor data to foreign clouds (or preferably any clouds) and then prosecute any offenders. What am I missing?