They are legally obligated for some US citizens. California (~40 million people) has a law similar to GDPR.
They also don’t have a way to check where you live so you can do the request and select either option (GDPR or CCPA) and they will fulfill the request.
This is not the case, not they say “report and move on”. Reporting is literally alerting them to the problem post.