I think, still, that the best defense against this type of thing is education. Education on what nefarious actors can do with data types xy and z, and education on how to not get owned by a foreign actor.
I still think an app ban is principally un-American, but this is the imagination part that I couldn’t come up with that at least gives what I’m still calling republican hysteria a veneer of legitimacy.