Cambridge Analytica showed you don't need to hack. You just need to be a developer and have keys to the kingdom with a "gentleman's agreement" that you won't do anything hinky with the access you've been granted.

No need to hack, if you have the right connections and enough money you can buy anything from the US gov, the US gov has access to all data and non US citizens have no rights.