As written, any “website, desktop application, mobile application, or augmented or immersive technology application” that is “determined by the President to present a significant threat to the National Security of the United States” is covered.

Currently, the definition of “foreign adversary” includes Russia, Iran, North Korea, and China.

The definition of “controlled,” meanwhile, turns out to be a word salad ...

A “foreign adversary controlled application,” in other words, can be any company founded or run by someone living at the wrong foreign address, or containing a small minority ownership stake. Or it can be any company run by someone “subject to the direction” of either of those entities. Or, it’s anything the president says it is. Vague enough?