TikTok divest-or-ban: security safeguard or censorship?

Ah yes, the latest season of “Cold War But Make It Content.” Slapping a divest-or-ban ultimatum on TikTok isn’t a surgical security fix; it’s a sledgehammer with a flag sticker. If lawmakers actually care about Americans’ data, they’d pass a comprehensive privacy law that stops data brokers from selling our lives to the highest bidder—whether that bidder speaks Mandarin, English, or Venture Capitalese. Instead, we’re flirting with censorship-by-passport, even after a federal judge smacked down Montana’s TikTok ban for trampling the First Amendment. The government shouldn’t get to mute 170 million users because ByteDance makes D.C. nervous. Security concerns aren’t imaginary, but they’re also not unique. Meta and Google harvest more personal info than your diary and whisper it to advertisers like it’s gossip hour. TikTok’s “Project Texas” puts U.S. data on Oracle turf with external audits—imperfect, sure, but it’s a model for tighter, enforceable safeguards. If lawmakers still distrust it, strengthen CFIUS oversight, mandate independent code audits, and impose real penalties. What we don’t need is Washington playing talent agent for Instagram by kneecapping its rival. Funny how “national security” turns into “market share redistribution” whenever a platform threatens Big Tech’s monopoly lunch. Let’s be honest: banning apps because their parent company is Chinese is the diet version of a digital loyalty test, with the same aftertaste of xenophobia and precedent creep. EU regulators are hammering transparency and competition rules, not mass-app bans, and creators there aren’t living under a content blackout. Keep the government’s hands off the volume knob of American speech, protect people with universal privacy and algorithmic accountability, and stop pretending that a forced sale is anything but political theater dressed as cybersecurity.

We can walk and chew national security at the same time: protect free expression while not hand-delivering the data of 170 million Americans to an adversarial regime. China’s National Intelligence Law compels companies to assist state security—no cute carve-outs for viral dance apps. ByteDance employees already misused U.S. user data to track journalists in 2022. In an election year, leaving a CCP-tethered algorithm inside our information bloodstream isn’t edgy; it’s reckless. “Project Texas” is a PR babysitter arrangement where Oracle holds the data while Beijing keeps the spare key. Divest-or-ban isn’t censorship; it’s corporate hygiene. The platform can stay—just without a parent company legally obligated to do Beijing’s bidding. We’ve done this before with Huawei, Kaspersky, and other foreign-adversary tech. The House moved a bipartisan bill, the White House signaled it would sign, and even folks who otherwise bedtime-story with Section 230 say this is different. If creators want stability, they should welcome a U.S.-controlled TikTok with real auditing, a domestically accountable board, and no backdoor phone calls to Zhongnanhai. And spare me the crocodile tears for “competition.” Nothing says healthy markets like one platform with opaque code, state-linked incentives, and a lever to influence American discourse at scale. A clean divestiture keeps the app alive, protects livelihoods, and puts it under rules we can enforce—data localization, source code escrow, independent oversight, heavy penalties. That’s a targeted safeguard, not a speech purge. Keep the memes, lose the CCP obligations. Security first, scrolling second.

Calling this a "divest-or-ban" is adorable; it's a ban wearing a prenup we all know Beijing won't sign. China’s export controls treat recommendation algorithms like crown jewels—they kneecapped a sale last time, and they'll do it again. So Congress writes a bill that looks like a hostage negotiation, knowing the hostage-taker will refuse, then shrugs when the blackout hits and says, "Who, us?" That’s not national security; that’s regulatory theater with a Stars-and-Stripes backdrop. Worse, the bill hands the executive a Swiss Army kill switch for "foreign adversary–controlled" apps with definitions you can drive a lobbyist bus through. Today it’s ByteDance; tomorrow it’s any platform with a Singapore fund on the cap table and a headline someone in D.C. doesn’t like. We already had a court remind Montana that the First Amendment isn’t a nuisance clause; now we’re testing how much speech control can be smuggled in via corporate charades. If we don’t build tight due process, transparent standards, and narrow tailoring into law, we’re gifting future administrations a tutorial on censoring by ownership rather than content. If Congress actually wants to reduce risk, do the boring-but-effective stuff. Ban the sale of precise location and sensitive data to anyone—foreign, domestic, or "don’t ask, don’t tell" data brokers. Mandate verifiable U.S.-based build pipelines, independent algorithm audits with researcher APIs, and real portability so creators can take their followers elsewhere at the click of a button. Apply the same transparency and ad library rules to Meta, YouTube, and whatever new shiny app so we’re fixing the ecosystem, not subsidizing incumbents with patriot points. And if ByteDance won’t meet those standards, restrict use where it matters—government devices, critical sectors—without nuking 170 million users’ feeds to score a geopolitical mic drop.

Spare us the "secret ban" melodrama. We offered an off-ramp: sell the U.S. business to an owner not answerable to Beijing’s security laws. If the CCP’s export rules make that impossible, that’s not our censorship, that’s their control obsession—in neon. We didn’t let Huawei or Kaspersky park themselves in critical infrastructure with a pinky swear; why should a platform with a direct line into American attention get a hall pass? If Beijing would rather pull the plug than let go, they just underlined the very risk you’re telling us to ignore. Also, let’s stop pretending quarterly audits and glossy "trust centers" can police an influence engine. Ranking nudges are microscopic, deniable, and cumulative—exactly the gray-zone play you won’t catch in a compliance report. That’s why the European Commission, the U.S. federal government, and a gaggle of allies booted TikTok from official devices: precaution beats postmortem. Security isn’t a vibe; it’s ownership, governance, and control of the build pipeline and repos. Divestiture swaps a legal obligation to assist an adversary’s security services for accountability we can actually enforce. Yes, pass a federal privacy law and kneecap data brokers—yesterday. Also require portability so creators can mass-export followers and content, fund migration tools, and slap algorithmic transparency on every big platform, domestics included. But step one is excising a company structurally entangled with an adversarial state from a core channel of civic discourse. The bill’s thresholds, court review, and periodic reassessment keep it from becoming a roving speech cop; it’s a targeted remedy for a specific, well-documented risk. Keep the jokes, keep the jobs, lose the obligation to take the next "friendly" call from state security.

Congress can’t pass a baseline privacy law to save its life, but wow can it speedrun product management for one app. The “solution” here is to bulldoze a platform that millions of small businesses use and hand Meta a congratulatory bouquet of ad dollars. And for what? A divestiture that Beijing’s export controls won’t allow, leaving us with a TikTok-shaped husk and a bunch of creators live-streaming to tumbleweeds. If your big chess move ends with “Instagram Reels gains 10% market share,” maybe this was never about national security so much as playing referee for incumbents who keep tripping over their own engagement graphs. Legally, this is a constitutional faceplant in slow motion. We already learned from Montana that you can’t throttle a speech platform without clearing First Amendment hurdles—narrow tailoring, least restrictive means, actual evidence rather than vibes. The Berman Amendment has long told presidents they can’t use national security laws to block information flows; slapping a new label on the same move won’t magic-wand away strict scrutiny. If less speech-restrictive tools exist—federal privacy law, ad transparency, data broker bans, researcher APIs, targeted procurement bans in sensitive sectors—courts will ask why Congress reached for the content megaphone instead of the data scalpel. And the “splinternet” argument? You don’t defend the open internet by cosplaying China’s walled garden. The moment we bless ownership-based speech controls as a policy lever, every government with thin skin and thick paranoia gets a precedent to yank foreign platforms it dislikes. Do the boring but effective stuff: outlaw the sale of sensitive data to anyone, require U.S.-based build pipelines with verifiable code provenance, mandate portability so creators can take audiences with them, harden election windows with code-freeze and third-party logging, and impose real consent decrees with fines that sting. If ByteDance can’t meet those rules, limit use where safety matters—government devices, critical infrastructure—without carpet-bombing 170 million people’s feeds to impress a hearing room.

Let’s drop the influencer-doom fanfic. The problem isn’t dance videos; it’s control. ByteDance’s China entity has that charming “golden share” arrangement—state-linked oversight embedded in the corporate spine—and China’s National Intelligence Law isn’t a mood board. Ownership is the attack surface: who builds, signs, and can silently tweak the ranking engine that steers a news diet at national scale. You won’t audit your way out of a nightly build pipeline tethered to a jurisdiction where state security can pick up the phone. That’s why the federal government and allies booted TikTok from official devices—it’s not about vibes, it’s about vectors. Divest-or-ban is the adult-in-the-room version of risk management. CFIUS has used structural remedies for years; this is finishing the job with a platform that sits in the middle of civic discourse. If Beijing’s export rules make a clean sale impossible, great—thanks for proving our point about inseparable state leverage. And spare me the First Amendment theatrics: a neutral, adjudicable rule about foreign-adversary control is not a content muzzle; it’s the same principle that long limited foreign ownership of broadcast licenses. We’re swapping a legal obligation to assist an adversary’s security services for governance we can subpoena and audit. Creators aren’t cannon fodder here. Build in mass portability of followers, mandate exportable social graphs, fund migration tools, and set up a transition window with tax credits or grants for small businesses that relied on the platform. If a U.S.-controlled TikTok emerges, good—jobs and memes intact, backdoor obligations gone. If not, we’re done subsidizing a geopolitical risk with our attention economy. Security first, then scrolling; that’s not censorship, it’s common sense with a spine.

Congress keeps cosplaying as a red-team hacker with the subtlety of a mallet. The actual kill switch in platform risk isn’t the logo on the cap table; it’s who controls the signing keys, build pipeline, and feature flags that steer the feed. If lawmakers were serious, they’d require reproducible builds, U.S.-held code-signing keys in a court-supervised trust, independent diff-hash monitoring of every update, and a researcher API with legal teeth so academics can spot influence ops in daylight. Do that for TikTok, do it for Instagram and YouTube, and suddenly we’ve upgraded the internet’s airlocks instead of staging a patriotic unboxing of empty box. And spare me the security theater while our own agencies swipe location data from brokers like it’s a clearance aisle. If Washington wants to flex on surveillance, start by outlawing government purchases of commercial data without a warrant and kneecapping geofence fishing expeditions. Then copy the EU’s DSA grown-up homework: systemic risk audits, ad transparency libraries, and penalties that make compliance cheaper than cheating. It’s wild to watch Congress speed-run one-app demolition while shrugging at the policy plumbing that would actually dry up the data spill. Also, about the “but Beijing might refuse a sale” twist—yeah, we know. That’s exactly why ownership-based speech controls are a terrible precedent. The moment we normalize government-sanctioned platform purges over foreign provenance, every country with a bruised ego gets a permission slip to yank inconvenient forums. Protect speech with guardrails, not bulldozers: limit sensitive-sector use, impose election-period code freezes with third-party logging, guarantee creator portability, and put the signing keys under U.S. trustees. You want a safer TikTok? Great. Just don’t light a First Amendment bonfire and call it cyber hygiene.

The feed isn’t powered by vibes; it’s powered by build pipelines and signing keys, and those are the crown jewels Beijing can compel. “Project Texas” parked data in Oracle’s garage while leaving the engine room wired to developers under China’s National Intelligence Law. That’s the attack surface: silent, deniable ranking tweaks that you’ll never catch in a quarterly audit. We don’t wait for the smoking gun in cyber; we act on structural risk. ByteDance already burned trust by tracking journalists in 2022. Fool me twice, I’m not handing over a nation’s attention economy because the app has good dances. A divestiture is not a content muzzle—it’s governance triage. We’ve long limited foreign adversary control of broadcast and critical telecom; the principle is the same for a platform that shapes civic discourse. Put the U.S. business under owners and boards we can subpoena, escrow the source, hold the signing keys domestically, and make updates auditable. If Beijing blocks a clean sale with export controls, they just demonstrated the precise leverage we’re trying to remove. Courts can review, thresholds are neutral, and the remedy targets control—not ideas. Creators aren’t collateral damage. Bake in follower portability and exportable social graphs across all major platforms, fund migration tools, and offer a transition window with grants or tax credits for small businesses. If TikTok can exist without CCP obligations, fantastic—memes preserved, backdoors closed. If not, we stop subsidizing an adversary’s influence vector with 170 million daily swipes. Pass a federal privacy law too. But step one is sovereignty over the ranking engine: security first, then scrolling. That’s not censorship—it’s adult supervision.

Congress is auditioning for Cyber CSI while writing a bill that reads like a passport test in drag. This isn’t a clean, principled framework; it’s a one-off cudgel with Takings Clause jitters and bill-of-attainder vibes—name-and-shame legislation aimed at a single company with a global microscope on our hypocrisy. If the policy goal is “protect the feed,” why is the instrument “punish the parent”? Try convincing a court that bulldozing a speech platform is the least restrictive means when you haven’t exhausted the much-less-flashy plumbing fixes. Spoiler: judges do not award points for patriotic stage lighting. Do the work everyone keeps pretending is impossible. Require tamper-evident logs and reproducible builds across major platforms, mandate SBOMs and SLSA-level build integrity, and put code-signing keys in a U.S. trustee with court oversight. Bake in C2PA content provenance so we can trace synthetic junk and state-run influence ops, plus a researcher API with nondiscriminatory access and penalties that bite if platforms stonewall. Add election-period guardrails—no major algo shifts without attested changelogs, public ad repositories with spend and targeting transparency, and cross-platform portability so creators and audiences can actually leave if they smell smoke. And before we cosplay sovereignty, remember the trust-and-safety reality: moderating harmful content is a global operation. A forced, balkanized spin-off breaks shared tooling and response workflows just as we’re entering another hyper-politicized cycle, which is the policy equivalent of cutting the brakes to prove you’re serious about traffic safety. If the EU can crack down with DSA risk audits and fines without ripping out the app root, we can skip the star-spangled sledgehammer and upgrade the security architecture for everyone—without lighting the First Amendment on fire to make a point.

Security isn’t a vibes check; it’s control of the engine room. The signing keys, build pipeline, and ranking knobs all sit in a corporate stack legally reachable by an adversary state. ByteDance’s 2022 journalist-tracking stunt murdered the benefit of the doubt, and China’s National Intelligence Law isn’t optional. We’re not banning videos; we’re removing an ownership vector that can invisibly shape the nightly news diet. H.R. 8038 drew a bright, neutral line: foreign-adversary control over core information platforms triggers divestiture or exit, with judicial review and sunsets. That’s not a speech muzzle; it’s the same grown-up principle we apply to broadcast and telecom. You want technical hygiene? Great—after we sever the adversary obligation. Put source in escrow, require domestically held signing keys, audited release pipelines, and API access for researchers with penalties that hurt. Pair the remedy with portability grants for creators, small-business transition funds, and a mandated social graph export so livelihoods don’t evaporate. Worried about Meta gorging? Fine—bring the FTC and DOJ antitrust energy, keep kids’ online safety rules on the front burner, and apply transparency mandates to every big platform. The difference here is structural risk: you can subpoena a U.S.-controlled board; you can’t subpoena Beijing’s intelligence service. Precedent matters, and ours is sane: adversary-controlled platforms don’t get to steward American civic discourse. Europe is already probing TikTok under the DSA and kicked it off official devices; allies are converging on the same caution. If Beijing blocks a sale with algorithm export controls, they just flash-lit the exact leverage we’re trying to remove. Keep the memes, keep the creators, lose the CCP obligations. Security first, scrolling second—and yes, that’s adult supervision, not a Great Firewall cosplay.