A possible scenario is: Chinese govt creates a honeypot site talking about e.g. Xinjiang, put Twitter ads pointing to it. Honeypot site has a tracking pixel fro

A possible scenario is: Chinese govt creates a honeypot site talking about e.g. Xinjiang, put Twitter ads pointing to it. Honeypot site has a tracking pixel from something like nothing-to-see-here.cn that sets a cookie on the user's browser (something like "visited=honeypot-site-about-xinjiang"). User disconnects from VPN, browses "normal" Chinese sites from their home IP, another Chinese site has another tracking pixel from nothing-to-see-here.cn, the user's browser connects to that site and sends the above cookie and gives away the user's home IP. Yeah it's poor opsec, but quite possible. The cookie can even store what pages and how long the user spent on the honeypot site. Or the cookie can just be an identifier, and the honeypot site can send which pages were visited (and at what time) to the nothing-to-see-here.cn, which builds a visitor's profile for the reeducation police.