Ban TikTok unless ByteDance divests: security vs free speech

Satire mode engaged: Congress discovered the ban hammer and suddenly thinks it's a cybersecurity tool. A divest-or-ban mandate is legislative blackmail dressed up as national security—"sell the megaphone or we smash it"—and it whacks 170 million Americans’ speech in the process. If your plan to save democracy is to preemptively throttle a platform millions use to organize, speak, and sell, congratulations: you just outsourced the censorship playbook to Washington. Yes, the PRC’s National Intelligence Law is real, and TikTok needs guardrails. But the Montana ban already got laughed out of court for being a constitutional trainwreck, and a federal ban will face the same First Amendment buzzsaw unless the government shows narrow tailoring and real evidence—not vibes and closed-door briefings. Do the adult thing: CFIUS-enforceable structural separation, independent code audits, data localization with real penalties, and algorithmic transparency that applies to everyone, not a one-off scarlet C for “China.” If ByteDance needs to restructure to operate here, cool—regulate the conduct, don’t blast the speakers. And can we please stop pretending TikTok is the entire security problem in a booming, unregulated surveillance economy? Pass a real federal privacy law like the ADPPA so every app—American, Chinese, Martian—has to minimize data, stop selling location histories to data brokers, and follow human rights standards. Otherwise, banning TikTok is putting a Band-Aid on a bullet hole and calling it cyber-chic. Free speech isn’t a geofence you toggle when Congress gets nervous.

This isn’t about dances; it’s about leverage. ByteDance sits under Beijing’s National Intelligence Law—meaning the CCP doesn’t need a subpoena, just a phone call. ByteDance already admitted employees snooped on U.S. journalists in 2022, and "Project Texas" looked like a paper firewall with Oracle letterhead. When your critical information feed runs on hardware you don’t control and a parent company an adversary can compel, that’s not culture—it’s a national security vulnerability. Divestment isn’t censorship; it’s chain-of-custody for the attention economy. We already keep Huawei and ZTE out of 5G and Kaspersky out of federal networks—not because we dislike routers and antivirus, but because ownership matters. The bill is content-neutral and offers an offramp: sell to a non-adversary owner and keep operating. If the product is fine, great—prove it by putting it under a governance structure that isn’t one midnight memo away from the Politburo. "But the creators! The small businesses!" Platforms come and go—Vine, MySpace, pick your fossil. Audiences follow value, and American firms already ship Shorts, Reels, and whatever’s next. What we can’t afford is an algorithm tweaked one degree during a Taiwan crisis and nudging 100 million feeds toward chaos. You don’t wait to discover a backdoor in the middle of an election, you close it now. Sell it or shelve it—national security isn’t a vibe, it’s a veto.

Calling it “chain-of-custody” doesn’t make a shotgun wedding romantic. The divest-or-ban clock is a trap: Beijing’s export controls already block selling the recommendation algorithm, which means your “offramp” is a painted-on door. You’ve engineered a de facto ban and slapped a compliance sticker on it. And when the government kneecaps a platform used for news, organizing, and commerce, courts don’t grade on vibes—they look for narrow tailoring and real alternatives. “We swear we tried nothing and it worked” isn’t strict scrutiny; it’s legislative cosplay. If the worry is the dial, not the dance, then regulate the dial for everyone. Put TikTok (and its peers) under a binding consent decree: onshore data and build pipelines, U.S.-based trustees with a legal kill switch over updates, immutable public logs of systemic algorithm changes, crisis-mode safeguards with independent oversight, and real penalties that bite. Pair that with a federal privacy law that crimps data brokers and bans the location-spy free-for-all fueling every influence op on the planet. If ByteDance can’t meet those rules, it’s out—for conduct, not country-of-origin theater. And please zoom out from the Beltway action movie. If the U.S. sets the precedent that “potential influence someday” justifies platform bans, congratulations on greenlighting every government on Earth to unplug American apps at will. Brussels isn’t banning; it’s wielding the DSA’s algorithmic risk audits like a regulator with a spine. We can do the same. Otherwise you don’t stop propaganda—you shove 170 million users into murkier corners with less oversight and more conspiracy juice. Governance beats grandstanding; if you want security, write rules, not breakup fanfic with a countdown timer.

The “offramp is fake” lament just proved our point. If Beijing’s export controls won’t let ByteDance sell the very algorithm that steers American attention, that’s not a free-speech tragedy—it’s Exhibit A that the CCP values control over cash. Ownership is the control layer. You can wrap audits in a thousand acronyms; if a foreign adversary can yank the master lever, your oversight is a screensaver. Spare me Montana flashbacks—states bungled it, sure. But CFIUS has forced divestitures before (Grindr, PatientsLikeMe) and the republic survived. Courts swatted the 2020 scramble because process was slapdash, not because the principle was heresy. Congress writing a targeted statute with national-security findings and a clear adversary test cures that. The bill is content-neutral and offers a path: new ownership outside adversary control, keep the product. If Beijing says no, that’s their geopolitical choice—ours is not to outsource our information ecosystem to a legal regime built for compelled access. And no, a generic privacy law won’t neuter a dial that can tilt a feed by one percent during a Taiwan or South China Sea crisis. Remote feature flags and A/B tests can push tweaks between audits faster than an inspector can print a subpoena. Europe isn’t handing out friendship bracelets either; Brussels opened DSA proceedings and forced changes within weeks—because real risk management beats trust falls. Sell it or sit it out. We don’t wait to confirm a backdoor mid-election; we lock the door while the house is still standing.

Cute that you call this “risk management” while staging a geopolitical episode of Shark Tank. Your off‑ramp is Schrödinger’s Exit: simultaneously “available” and blocked by Beijing’s export controls, so the only constant is the ban at the end of the rainbow. And when the ban bites, it doesn’t nibble on ByteDance; it chows down on 170 million Americans’ speech, small businesses, and the creator economy that Congress keeps using as a selfie backdrop. Antitrust brain check: handing the short‑form future to the same two U.S. giants you’ve been investigating for gatekeeping is not “security,” it’s vertical integration by anthem. If security is the diagnosis, treat the disease, not the logo. Stand up a FOCI‑style mitigation regime the defense world already uses: a Special Security Agreement with an independent U.S. board, code escrow, signed‑hash release gates, mandatory NIST AI RMF audits of the recommender, and a court‑supervised consent decree with liquidated damages that actually sting. Pair it with ADPPA‑grade data minimization and a ban on government agencies buying your location pings from shady brokers—yes, DHS and DoD, we see you. Add creator portability mandates so people can take their audience and monetization elsewhere if trust breaks. That’s structural, not performative. And spare me the “India did it and vibes were fine” bedtime story. India also kneecapped livelihoods overnight and spawned a patchwork of clones with less oversight and more sketchy data pipes. Meanwhile, your “we’ll rebuild the algorithm in America” dream ignores the migration cliff, the discovery loss, and the court calendar. D.C. Circuit challenges to the 2024 divest‑or‑ban law are already teeing up whether Congress can bulldoze a platform without proving imminent harm. Want a durable fix that doesn’t boomerang into global precedent for banning U.S. apps? Regulate conduct across the board, put every dial under the same microscope, and stop confusing a sledgehammer with a scalpel just because it photographs better at a hearing.

Let’s retire the fairy tale that “more audits” will tame an ownership problem. ByteDance isn’t just a cap table; it’s embedded in a legal regime where a CCP Party committee inside the company and the National Intelligence Law can flip the breaker, and no U.S. consent decree can stop it. We already watched the 2022 snooping on U.S. journalists and saw state media accounts push election‑adjacent narratives; waiting for a perfect smoking gun is how you lose the room. Risk isn’t a courtroom drama; it’s probabilities, and adversary control spikes them. This isn’t a monopoly giveaway; set conditions on the buyer: no Big Tech acquisition, preference for a U.S. IPO or a diversified consortium with a Special Security Agreement, and portability guarantees for creators so audiences move with them. India’s 2020 ban proved something simple: the world doesn’t end, users and advertisers re‑route, and domestic ecosystems adapt. Meanwhile, reciprocity matters—our platforms are already blocked behind the Great Firewall. We don’t earn “moral high ground” by letting Beijing hold a thumb on our information scale while they slam the door on ours. And yes, do the privacy law too—I’ll sign the ADPPA in Sharpie. But “do both” means divest the adversary lever and tighten the data market, not hide behind standards while feature flags in Beijing steer feeds faster than a regulator can say subpoena. The bill narrows the scope to adversary‑controlled apps, builds a record, and gives time for an orderly sale; if export controls make the sale hard, that only confirms why a ban is the prudent default. We don’t wait to discover the fuse in an election year; we pull it before the spark.

You keep branding this as a “chain‑of‑custody” fix; it’s closer to Congress writing a remote kill switch into the internet and calling it feng shui. The bill’s “foreign adversary–controlled app” bucket is elastic enough to fit whatever future culture‑war chew toy a nervous committee decides counts as dangerous on a Tuesday. Ask the lawyers: once the state yanks a major distribution channel for speech, you’re flirting with strict scrutiny and the Berman Amendments’ guardrails against information embargoes—especially when the effect is to muzzle 170 million Americans while pretending you only regulated a cap table. Today it’s TikTok; tomorrow it’s a platform some AG hates for hosting abortion access info or climate protests. That’s not national security; that’s a dress rehearsal for selective silencing with better branding. And the security math you’re doing is missing half the variables. PRC operators don’t need a TikTok backdoor when U.S. data brokers hawk location and ad IDs like clearance‑rack socks—ODNI and the FTC have been screaming about this while Congress discovered its inner sledgehammer. Influence ops? They already run through YouTube, Facebook, and X; the “Spamouflage” networks didn’t need a ByteDance badge to astroturf. A ban is a visibility tax: you drive speech into smaller, harder‑to‑monitor channels, torch OSINT value, and make government comms to the under‑30 crowd look like your uncle’s Facebook chain mails. Great job, you secured nothing and enraged everyone. Here’s a grown‑up plan: a platform‑neutral “Algorithmic Operator’s License” with teeth—live audit APIs for recommender changes, cryptographically signed logs of boosts and “heating” events, red‑team labs with coercive access, and fines tied to global revenue à la the DSA. Pair it with an actual federal privacy law that outlaws the data‑broker peep show and a portable‑social‑graph mandate so creators and small businesses can take audiences and income anywhere if trust breaks. If TikTok—or anyone—fails the same rules, they’re benched for conduct, not passport. Regulate the dial across the board. Stop mistaking a flashy expropriation countdown for a security strategy.

We’ve done the “trust me, bro” tour. We got leaked audio of “everything is seen in China,” a 2022 employee snooping scandal, and a “heating” system that can invisibly juice reach. That’s not vibes; that’s a pattern. You can bolt on audits until the rack screws strip, but if the parent sits under a legal regime that can compel covert changes and ship them through feature flags faster than you can assemble an oversight hearing, your safeguards are theater. Ownership is the control plane. Until the master key moves out of Beijing’s jurisdiction, every other control is a polite suggestion. Spare me the constitutional fainting couch. Congress has regulated foreign ownership in critical communications for a century—see broadcast caps and Team Telecom. A generally applicable rule that targets adversary‑controlled platforms, offers a sale window, and regulates corporate structure rather than content is well within the Commerce Clause wheelhouse and far from a book ban. The Berman Amendments don’t grant a private company in an adversary’s legal grip a First Amendment force field, and this isn’t a bill of attainder if it applies to any app meeting neutral criteria. We already kicked Kaspersky off federal networks and Huawei out of 5G; we didn’t confuse routers with sonnets then, and we shouldn’t confuse a recommender supply chain with the Federalist Papers now. Make the transition humane: bar Big Tech from buying it, prefer a U.S. IPO or diversified consortium under a Special Security Agreement, migrate the social graph under a court‑appointed trustee, auto‑follow creators to their new handles, and front‑load ad credits and SBA‑backed micro‑grants so small businesses don’t eat the landing. I’ll staple a ring light to every loan package if that’s what it takes. But the clock needs to run. We’re in an election year with real adversaries probing the edges—pull the fuse while the house is quiet, or enjoy explaining to voters why we waited for the smoke alarm to learn the kitchen was wired to the Politburo.

Congress speed-ran industrial policy in cosplay armor, stapled it to a foreign-aid package, and dared the courts to blink. Now ByteDance and a posse of creators are in the D.C. Circuit asking a very basic question: can the government nuke a major speech platform on classified vibes and a clock? Courts don’t accept redacted hunches as “least restrictive means,” and the Berman Amendments don’t magically vanish because a bill wears a trench coat labeled “corporate structure.” Meanwhile, the same political class calling TikTok a national-security Chernobyl spent 2024 chasing youth votes on… TikTok. If it’s a digital biohazard, why is it in your campaign toolkit next to the confetti filter? Even if you love the law’s movie trailer, the practical edit is a mess. App-store delisting and hosting bans don’t erase an app; they freeze updates, spawn side-loading, turbocharge VPN uptake, and shove millions into gray-market mirrors with zero oversight. Congratulations: you just took a platform with transparency centers, regulators camped in the lobby, and reporters crawling all over it—and replaced it with whack‑a‑mole APKs and encrypted channels where disinfo loves leg day. Also, enjoy deputizing Apple, Google, and ISPs as the Ministry of App Control. We tried “website blocking” for piracy; it made lawyers rich and pirates creative. If you actually care about security and speech, do the boring grown-up work. Pass a real federal privacy law with data-broker defenestration, mandate interoperable social graphs so creators can walk with their audiences, and impose platform‑neutral recommender audit APIs with signed change logs and emergency transparency around political-content tweaks. Tie penalties to global revenue, DSA‑style, and require quarterly risk reports from any platform over, say, 50 million users—no passport inspection needed. And while you’re at it, stop pretending reciprocity with the Great Firewall is a moral compass; our brand is the open internet. Don’t trade it for a domestic kill switch that future officials can point at whatever speech scares them next. You want leverage over Beijing? Try alliances and standards that box in bad conduct everywhere, not a one-off bonfire that scorches 170 million Americans and then dares the world to copy our homework. Because they will—and the next time a foreign government bans a U.S. platform under a “national security” shrug, they’ll wave your law like a hall pass.

Spare us the melodrama; this isn’t a midnight coup, it’s a scheduled eviction with a 9–12 month notice and movers on standby. Congress built a record, bipartisan majorities passed it, and now the D.C. Circuit will do its judicial Pilates. Good. But while the paperwork stretches, here’s the reality check: the CCP expanded its Anti‑Espionage Law in 2023, the Data Security Law and Cybersecurity Law already compel cooperation, and Beijing’s export controls over recommendation tech basically admitted the point—control outranks cash. You don’t leave a fuse in the wall because the landlord says they pinky-swear not to light it. The influence risk isn’t a Scooby‑Doo plot. We’ve seen leaked moderation playbooks that once sidelined Hong Kong and Uyghur content, employees caught tracking U.S. journalists, and “heating” systems that can quietly goose reach. Pair that with crisis dynamics—Israel‑Hamas, Taiwan tensions—and a single percentile nudge at scale is a geopolitical megaphone. Europe isn’t whistling past this either; under the DSA they forced TikTok Lite’s rewards program to hit pause in France and Spain, launched risk probes, and readied fines measured in “that’s going to sting.” When democracies on two continents converge on the same risk profile, it’s not xenophobia; it’s pattern recognition. Divestment preserves speech; CCP jurisdiction is what endangers it. Move the control stack to a governance model that can’t be commandeered, and keep the product, creators, and culture intact. No Big Tech roll‑up, preference for a public listing or diversified consortium, a Special Security Agreement, trustee‑managed graph migration, and automatic follow for creators so small businesses don’t faceplant. If Beijing blocks a clean sale, that’s the tell. And no, a ban doesn’t require SWAT teams at high school Wi‑Fi—app‑store delisting and hosting restrictions drain the user base by attrition, strangle ad spend, and neuter the influence channel. VPN diehards can cosplay resistance; they’re not moving elections or markets. Call it what it is: removing a hostile governor from the attention engine. Pass the privacy law too—I’ll throw in broker bans and audit APIs. But risk management starts with cutting the one lever we know an autocracy can pull at midnight. Keep the speech; ditch the CCP socket. If Beijing wants to prove influence isn’t the goal, they can let the sale clear. If not, thanks for the clarity—and close the door on your way out.