The 3 letter regulatory agencies are more of an attack vector than elected politicians. Most of the battles are going to be fought in courts instead of voting.

Force everyone to KYC when buying mining hardware would be a big one.

The EIA survey that recently got paused was a good one.

Going after the pools to KYC customers is another huge one.

I'm kind of afraid to say a whole lot because I don't want to give anyone ideas but it's very important to be thinking adversarially right now.