> another thing I'm wondering is about jurisdiction, since most of this occurred offshore and didn't involve US customers

This is complicated, but often it's possible to try someone in a single country, especially if it's their home country. In CSAM cases this often happens, the facts might happen in Asia, but someone is tried in their home country. I know the law in my country has provisions specifically for this and murder cases among others.