Of course they don't get applied across the board. As much as TikTok is a US national security risk, Google/Meta massively gathering data about citizens of other countries is a US national security asset.

The problem with privacy law is that some foreign powers won't abide by the laws. It's not unlike violence- a country can try to make a global law saying "Nobody is allowed to have a military", but if they actually get rid of their military, they will just get taken over by a different country which does have a military.