Except that China can just buy it from American companies, mostly because our government won’t do anything to protect our privacy.

it’s even worse if it’s GCHQ gathering it and then just handing it over to the CIA, where the cia gathering it themselves would be illegal, but they use treaties and diplomacy as loopholes to subvert our actual legal protections.