The question is whether the law burdens the expressive rights of its users. Since the law is content neutral, punishing TikTok for security and data concerns, it warrants intermediate not strict scrutiny and survives because it does not burden speech in general broader than necessary