The simpler answer is to just ban it. The law doesn't need to be technically detailed or envision every single technological adaptation: it just needs to be sufficient for a judge to be able to recognise it when a prosecutor describes it and a defence lawyer attempts to pull the wool over their eyes. It needs to be focused on outcomes.

Once banned, Google and Facebook will submit. They will attempt to lobby against the reforms, eventually saying "it will prevent legitimate business: it represents a small fraction of our revenue, but we are selflessly lobbying on their behalf to ask you to implement this technically specific law to reign us in". Ignore them. You don't listen to the hitman when they comment on homicide laws.

And ensure that the penalties amount to a ban. The US congress and courts can and do terminate human lives. Whatever penalty they propose on abstract legal entities is not too harsh; even if they completely dismantled Google and destroyed all of their economic value, it is nothing compared to the things we do to natural living breathing humans in response to criminal behavior.

Profitable companies will submit to a law that aims to control their behavior.