(oh btw “We are in X country which is not in N eyes” is just marketing)

Why do you say this? There are real data-sharing agreements between the Eyes.

Doesn’t even need some complicated backdoors or anything it just needs to find an OPSEC slip-up

This already happened with kolektiva, unfortunately, but from what I hear they’ve since strengthened their security.