Not enforceable, what will they do about offshore VPNs? Many major VPN companies are already based outside of the US

You can opt out of it by putting your phone in “developer mode” or by using something like LineageOS

I say the letters U-E-F-I but often say BIOS interchangeably