They can’t do anything except create harsh regulations for anybody using this kind of math. This is what US is doing and it does work at stripping away user privacy.
Recent ZK Knowledge podcast recently discussed a lot of this, how you can determine IP addresses inside blockchain transactions, and DDoS, and Chainanalysis usage of IP for KYC.