They are adding to, but not taking away from the law. If they required only a TSA lock then they would be taking away. They are giving another option for passengers, and I think it's primarily so they can open up your stuff without you being there.
The law says only the passenger has the key or combo. I don’t know how more clear that can be.