The obvious difference between PGP and Mythos is that Mythos is a service you buy from a US company, not source code you can procure from anywhere and compile on your own. So this can be enforced better without running into thorny speech issues, etc. Of course, there will be US-based actors willing to resell access, just like there are US-based actors willing to re-ship export-controlled hardware to Iran. And they will probably keep getting arrested every now and then.
The thing that's silly about this situation isn't that export controls on technology can't work, it's that it's overhyped technology and that Anthropic painted themselves into that corner by pretending it's as dangerous as nukes. Add to this a mercurial and petty administration and you have a pretty predictable outcome.