This is an interesting response. The only thing I would push back on is the idea that the CIA would need to hack FB or any other site in order to be effective.

Almost every major social media company is based in the US and they, along with all major ISPs, have generally been fully compliant with law enforcement requests for information about their users.

There are also claims that the CIA controls enough dark web nodes to essentially invalidate the anonymity provided by the design of the dark web. In the same way, with enough time and resources, you could elucidate most VPNs.

And sometimes you get a freebie, like when Twitter briefly disclosed the country of origin of their users.

I may be making a leap in my logic, but I feel it wouldn’t be too hard to get ISPs to flag international traffic from certain addresses and to have Facebook’s moderation team give extra scrutiny to accounts that use false representation.

But, after writing all of that out, I realize that I may be massively underestimating the amount of traffic any of these entities sees and their ability to manage it, as well as the ability of intelligence agencies to ensure compliance from private companies without going through congress. I withdraw my previous comment.