I think you'll find legislators are less worried about something being "mathematically proven to protect privacy robustly", and more worried about just collecting money from someone publicly perceived as evil.
If they cared about actual privacy, they would go after no-name ad networks and data mining companies.