The problem is specifically that US law and policy will make both of those options unviable to guarantee the rights GDPR requires with respect to transfers to the US, once noyb gets the EU courts to state this clearly enough and invalidate the Commission’s adequacy decision for businesses which participate in the EU-US Data Privacy Framework. (In the meantime, EU companies are allowed to rely on that decision.)
There are several non-EU countries with adequacy decisions whose validity nobody is questioning, including Canada, New Zealand, and the UK. Many more countries can adequately be handled through Standard Contractual Clauses. The problem is very US-specific.