I wrote up a quick analysis last night here:
https://ioc.exchange/@invisv/110387246627189198Here are the takeaways:
* It'd be easy for Apple and Google to prevent downloads of TikTok for most users, which would also include app updates, as they have a significant amount of knowledge of users' locations and could prevent most users in Montana -- even those using a VPN -- from downloading the app or updating it.
* It'd be very difficult for Montana to enforce the other piece of the TikTok ban -- if "entity" in the bill means any company, they're stuck: the state has little ability to prevent side-loading of apps on Android and users who want TikTok can access app repositories hosted out of state. There's virtually no way for ISPs inside Montana to surveil all user usage to find out if they're trying to download TikTok from a third-party repository, and even if they could there would be legal issues with the state mandating this.
Fundamentally, this makes user privacy and security much worse.
* Apple, Google, and ByteDance could be aggressive and use the data they have -- all three have GPS data for most or all relevant users here (i.e. TikTok users on an iPhone or Android) -- and block requests to download or use TikTok from within Montana. And they probably will, unless they get a court to block the bill.
The one thing the bill banning TikTok doesn't do is the one thing that is desperately needed: actually protect user privacy, by banning the collection, aggregation, sale, and use of fine-grained user data -- by ByteDance, Meta, Google, Apple, Microsoft, Amazon, or any other.