I don't believe they are proactively stealing user files, but they absolutely pit in backdoors for the NSA and other western intelligence agencies to exploit at

I don't believe they are proactively stealing user files, but they absolutely pit in backdoors for the NSA and other western intelligence agencies to exploit at will (and I'm sure non-western agencies do it too any time they can discover them).