Okay, I see the source of confusion on my part, the act was split into two separate divisions: Division H and Division I, and Division H that you linked to does in fact mention TikTok and ByteDance.
If you’re not controlled by an adversarial nation as defined in Division I as a country specified in section 4872(d)(2) of title 10, United States Code, then you’re not gonna have to worry about your FOSS code getting taken down. If you do, then just stop sending userdata within 165 days and have those nations divest, then you can keep hosting FOSS.