and it’s especially surprising coming from two companies that serve billions of users worldwide
I mean, deanonymization and data-mining costs are gonna be R&D, so they're a fixed cost that doesn't really scale up with the size of the userbase, so it makes more sense, financially, for a company with a larger userbase to be putting resources into it.
On an entirely-unrelated note, I would make the following observations:
Monaco has no such law that I am aware of.
French is used in Monaco.
I don't know whether Pornhub cares about the IP address from whence a user is accessing it, but NordVPN appears to have Monaco exit nodes.
Pornhub apparently accepts cryptocoin payments via Verge.