(oh btw "We are in X country which is not in N eyes" is just marketing)
Why do you say this? There are real data-sharing agreements between the Eyes.
Doesn't even need some complicated backdoors or anything it just needs to find an OPSEC slip-up
This already happened with kolektiva, unfortunately, but from what I hear they've since strengthened their security.