Here's the meat: secretary of commerce has grounds to "take action to identify, deter, disrupt, prevent, prohibit, investigate, or otherwise mitigate...any RISK" coming from comms on IT platforms
Risk is undefined, and importantly, RISK NEEDS NO MEASURABLE OUTCOMES