why do you think gdpr hasn't been challenged more aggressively in US courts on its extraterritorial reach?

by just having a website openly available on the internet you fall under gdpr, even if you aren't based in the EU or make any money? not here to defend the ccpa I don't know much about it, but from reading the wiki at least it includes stipulations like "doing business in california" and "gross rev > $25m" etc

how does gdpr have extraterrestrial reach? if something were to be challenged in US courts shouldn’t it be ccpa?