They didn’t say that either. Where do you get this idea from that they’re talking about (all) US news sites?

They said “American propaganda websites”. That may include some news sites. It may also not include some news sites.

The most you could infer from their statement is that only American propaganda websites violate the GDPR.

Of course websites exist that violate the GDPR and are not American propaganda websites.

But the vast majority of websites commiting severe violations of the GDPR that an average European encounters will be American propaganda websites.

(Believe it or not, Europeans don’t often visit websites written in Russian or Chinese.)