> And what if the company wasn't based in California? Would there be any recourse for California to exert regulatory pressure over a company based in another state?

If the company is doing business in California and has assets or income streams in or coming from California then there are probably avenues for enforcement.

And if that wasn't the case, there wouldn't be an issue here in the first place.