The problem with whataboutism is the same as it always has been, which is that the critique skips the step of checking whether the person who is concerned about Chinese privacy compromises hinges that position on the innocence of Western companies.

That part is assumed, and inevitably the "both can be bad" point is made which neutralizes the whole thing. Until the next thread where the process plays out again.