> are owned by adversaries of the United States

Its not “are owned by”, its “has a current, pending, or potential future controlling interest, direct or indirect, that is, will be, or will come to have been held by an adversary of the united states” (and, yes, the bill itself explicitly and separately refers to both simple future and future perfect, for some reason.)

> That have a million or more users and are owned by adversaries of the United States.

No, it is not only restricted to services that are owned by adversaries of the United States. The text of the bill is very clear and much broader.

(10) ICTS COVERED HOLDING ENTITY.—The term “ICTS covered holding entity” means any entity that—

(A) owns, controls, or manages information and communications technology products or services; and

(B) (i) has not less than 1,000,000 United States-based annual active users at any point during the year period preceding the date on which the covered holding is referred to the President; or

(ii) for which more than 1,000,000 units have been sold to persons in the United States before the date on which the covered holding is referred to the President.