> The written regulations that give the Ministry of Public Security the right to just “take it” are the Regulation on Internet Security Supervision and Inspection by Public Security Organs (公安机关互联网安全监督检查规定).
But the law in question http://www.gov.cn/gongbao/content/2018/content_5343745.htm doesn't actually grant public security organs the right to just "take it" as the blog post claims. Having the authority to request on-site network security audits or do penetration tests would certainly give spies ample opportunity to find ways to exfiltrate data, but that doesn't mean they're legally allowed to do so.
I guess not many people care whether Chinese intelligence agencies spy on TikTok users legally or extralegally, but I just wanted to know whether there really was such a law. Apparently not.