One detail you might have overlooked: even if you're an American company - if you offer your services in Europe (through the web or otherwise), you're subject to European laws and regulations, including the GDPR.

"Sue me" is what a purely cis-Atlantean company might say.

Which is of course exactly what is happening with the likes of Google and Meta.

Google and Meta don't need to show up to court :)

...both of which have offices in the EU.