Laws don't have to solve all of the potential problems that may exist in order to be valid (this is one of the things they talk about in the decision).

However, there is another law that made sale of data to foreign adversaries illegal, passed in April 2024: https://www.congress.gov/bill/118th-congress/house-bill/7520