Ostensibly, their purpose for the legislation is to prevent spying/abuse/intrusion/etc. by foreign powers.
In that regard, the law should not include a single restriction on, or penalty for, US citizen access and use - none.
There are existing laws that apply to bad behavior of that sort - and those are not being applied properly - as with the Bidens.
