I would say this is a little too pessimistic. Legislation in the EU and California have both forced tech companies hands, it’s why we can download all our data and delete all our data (supposedly, doubtful in reality) on the large tech platforms. The issue I see is getting legislation that attaches itself to a standard controlled by the W3C. You are right that it won’t be something done by the US federal government though.
I would say this is a little too pessimistic. Legislation in the EU and California have both forced tech companies hands, it’s why we can download all our data and delete all our data (supposedly, doubtful in reality) on the large tech platforms. The issue I see is getting legislation that attaches itself to a standard controlled by the W3C. You are right that it won’t be something done by the US federal government though.