It seems silly to legislate "thou shalt not do really scare thing #1 if name == TikTok" or "thou shalt not allow any third party to have really scare access if name == China". Just leave out the if clauses.
Don't target China or Russia or Iran or North Korea. Don't exempt Virginia or Maryland or any three letter acronym. If it is dangerous for the Chinese government to do it, it is dangerous for the U.S. government to do it and for the sales department of Amazon to do it.