Legislators here are unsurprisingly really dumb. The CCP can just make their own bulk copy of data covertly using botnets posing as users, as is tradition. Al

Legislators here are unsurprisingly really dumb. The CCP can just make their own bulk copy of data covertly using botnets posing as users, as is tradition. Also all the GPS logging metadata and behavioral training data any adversary could ever want are there for the scraping too with any number of potential exploits. More than that though, companies like Oracle have never done any published work on supply chain attacks to my knowledge and stopping them is really hard. Are they reveiwing all the hundreds of third party dependencies too? Doubtful. Even if they are, you can review source code all day long but that will not stop a few bits being shifted at compile time to make the randomness in the TLS connections not so random, and easier to sniff for a party in the know. You could even shift them at runtime if you happen to be in charge of CPU manufacturing for most phones, which the CCP is. The CCP has demonstrated itself to be quite sophisticated with supply chain attacks. Nothing short of fully open sourcing TikTok and offering reproducible builds can even begin to protect users from covert surveillance and manipulation by a central party.