do they need to? I don’t think so.
Why not? How can you be sure that all these laws are going to be about all the same things and not have many tricky edge cases? What would keep them from being like that? Again, these laws give unique rights to residents of their respective states to make particular demands of websites, and they aren’t copy pastes of each other. There’s no documented ‘best practices’ that is guaranteed to encompass all of them.
they don’t want this solution, however, but in my understanding instead to force every state to have weaker privacy laws
I can’t speak to what they really want privately, but in the industry letter linked in the article, it seems that the explicit request is something like a US equivalent of the GDPR:
A national privacy law that is clear and fair to business and empowering to consumers will foster the digital ecosystem necessary for America to compete.
To me that seems like a pretty sensible thing to be asking for; a centrally codified set of practices to avoid confusion and complexity.
I guess there are probably a lot of people trading that stuff dumb enough to be networking on facebook and instagram with their real identities