> The US has to get a court order which bytedance can challenge in a court room.
As we've seen, the US is perfectly capable of building up a massive surveillance operation, and of tying the tech companies into that operation, without the involvement of any real court (i.e., something other than a secret rubber-stamp like the FISA court), and indeed without the public even knowing that such a system exists.
The US also exerts other forms of extra-legal pressure on companies. It can and does threaten tech companies to play ball, or else. When WikiLeaks published documents that embarrassed the US government, the US government froze all of their financial accounts, simply by telling the companies involved (e.g., PayPal) to do so. American tech executives know that they can face regulatory action if they say "no" to requests, so they have a very strong incentive to comply with demands to provide data, censor content, and help US government influence operations (see the recent revelations that Twitter worked with the US government on covert influence campaigns using inauthentic accounts).
> There is no way bytedance can structure its operations to prevent the CCP requesting data.
The Chinese government can request whatever it likes, but ByteDance can structure its operations to make those requests impossible or difficult to fulfill, or to make it so any attempt to fulfill such a request will be highly visible. The Europeans have exactly the same problem with regards to the US, which is one of the reasons that GDPR exists.
As I said before, right now, ByteDance faces much stronger political pressures from the US than from China.
However, beyond all this theoretical argumentation about which government exerts more control over ByteDance, the argument that TikTok is a security threat is absurd. It's primarily a platform for little funny videos, dance videos, etc. The motivation for banning TikTok is clearly just part of the larger tech war against China, and the general hysteria that has developed with regards to China in the US. That's why a thread about a tech company misusing user data to try to identify a leak has turned into a discussion about "the CCP."