I've seen Schrems II cited in similar situations, but municipal contracts often predate the latest regulations and are slow to change. Has anyone seen a municipality actually move away from US cloud providers because of these concerns?

Delighted to see more awareness on this - I hadn't seen the mxmap sites before. I believe it will be hand waved away by those with the power to change it, excusing the data as being stored in the EU, or just believing the various 'safe harbour' rules that exist now.

I recommend you contact your local data privacy office, as they usually take this quite seriously.

Fill in a formal complaint and watch the slow but inevitable unfold.