Those are solid requirements to be listed on joinlemmy.org and I would also add another one about moderation policies prohibiting racism, sexism, anti-LGBTQ+ bigotry, Islamophobia, etc. Otherwise, if a user joins an instance that the “official” page recommends and discovers it’s racists / sexist / etc, they’ll see it as a problem with #lemmy as a whole, as opposed to just one bad instance.
And as we’ve seen on Mastodon, if a Black user goes to a site where racism is tolerated and quickly encounters racist sh*t, they leave and tell their friends; ditto for trans, queer, Muslim, etc. users having bad initial experiences. Once that happens a bunch of times the reputation becomes hard to shake. Much better to steer people to sites where they’re less likely to have a bad experience!
You’re right … but tech has a lot of lobbying power and they are very very very strongly against a strong privacy bill, or even a bill that would regulate algorithms. So it’s easier for legislators to pass something like KOSA – or pass a weak privacy bill that will actually make the situation worse by getting rid of laws like California’s – and claim they’re doing something.