so my question is simple, did twitter engage the FBI or an auditing company to verify the rest of the staff who have access to sensitive data?
It would seem to be a concern they would have to follow up on. You can put in all the procedures you want and declare compliance to auditors but it only serves to make paper pushers happy.
I wonder - would such audit be in their interest? Perhaps it's easier for Twitter if foreign dissidents know that Twitter is not safe to use for them, and go elsewhere. Twitter then does not have a risk of politically charged situations, and can peacefully exist by serving the usual harmless inane chatter of general population.