> If they operate in the US, they certainly are.

Theoretically, yes. But the US isn't a police state where their activities would be constantly monitored in great detail for compliance. There's a lot they could do under the radar, and a lot of groundwork they could lay for some future inappropriate action.