They could press criminal charges against all Meta executives and extradite them from the US. Of course this is ridiculous and will never happen for a number of reasons, but it shows that the EU doesn't have literally no teeth.
Correct, however most countries have various related criminal offences. (e.g https://www.legislation.gov.uk/ukpga/2018/12/section/170/ena...) It's extremely unlikely any of these would be relevant in this context though.