I mean, this seems pretty easy to enforce. “Mr Musk, why is there a blue check mark next to a terrorist’s X account? Are you doing business with sanctioned groups?” X isn’t some international public service. Its a private US company subject to laws.