You linked to that announcement. I quoted the most substantive section explaining what the DSP is. Reading that description, it’s pretty clear that it has absolutely nothing to do with Glitch (or Pocket). Glitch isn’t a data broker.
If anonymous people are abusing free tiers on Glitch, it's hard to say if some of those bad actors are also foreign adversaries. People will make C2C infra out of anything these days, and even if they were making a net profit on the whole enterprise, which remains to be seen, perhaps the costs of compliance for Glitch (or Pocket) were not worth paying.
I went out of my way to do original research for HN, and made a case for why I think the results are respondent to the original query as asked. I think that it's likely that the new parent company of Glitch, Fastly, is subject to the DSP, and that obligation probably extends to their subsidiaries. Same for Pocket and Mozilla.
It's clear to me that this situation deserves further study.
It feels likely that it could apply to any company that draws the current administration’s ire.
I agree it’s very reasonable to imagine that legal departments across tech are worrying, and might consider shutting down — especially if they are already losing money.
These are questions for your lawyer, and if they don't have good answers, questions for your new lawyer. If you don't have a lawyer yet, there's your problem.