Users typically agree to send their data to Google. With NSO and Pegasus the purchaser agrees, but the intended victim (the one being exploited) never agreed t

Users typically agree to send their data to Google. With NSO and Pegasus the purchaser agrees, but the intended victim (the one being exploited) never agreed to send their data to whomever purchased Pegasus from NSO or the NSO. So it doesn't really matter if NSO has less data than Google. It matters _HOW_ the NSO Group/ customer got the data which 99.9% is against the wishes of the victim.