I never made any such claim that it would be impossible. Your initial claim is still wrong.

Moving the datacenter to the EU makes it a crime; we can at least impose diplomatic sanctions as and when we catch foreign spies doing crimes in the EU. If the datacenter is in the US then there's no recourse.

That's exactly why the privacy shield was invalidated by the CJEU.