Apple in some ways is like a quasi data privacy regulator because they have control of the App Store. They can use App Store policy to forbid these third party frameworks being included in apps.

But that's not a scalable solution. Privacy legislation is required to raise the bar for everyone. Apple's not going to be able to sue or fine companies nor can they police companies about how they use data they've managed to collect.