I feel the article is a bit roundabout, but eventually gets to the point: "Sovereignty" is not (mainly) about physical location, it's about which legal entity controls the data and whether or not that entity is subject to US jurisdiction and could be forced to disclose the data to US companies or agencies, in violation of EU law.