Would they actually go after the people?

I expect the law would place the responsibility on the companies managing / distributing the OS. That’s the reason companies are complying. People can always look for alternatives… I’m sure there will always be homemade distros without stuff like this made by ragtag groups / communities without much of a corporate structure behind.