Let me put things this way: after my last AliExpress purchase I was targetted for the first time in my life by a PayPal fishing phone call from India (starting with a pre-recorded message in my native language but then switching to some guy speaking English with an Indian accent).

Somebody I know has been targetted twice by "you package is awaiting at customs" phishing messages after making purchases at AliExpress.

Maybe coincidence, maybe AliExpress is having their trade payment processing ops outsourced to somebody that sells it to people that will use it to fraudulently pass themselves as a natural entity involved in the purchase process (like PayPal or the destination country's Customs) or maybe AliExpress themselves sell that data. Judging by the amount of outright fraudulent sales claims there (the capacity of any power storage devices is at times hilarious, as is the output wattage of solar panels and storage capacity of external SSDs), my bet is the latter, though if it's not that totally not giving a shit about the risk of the second possibility is almost a certainty.

That kind of "why should I care" bullshit you're peddling is exactly the same kind of bullshit that was peddled a decade and a half ago about having one's e-mail with Google, and look at were we are now.

Unless you're stupidly isolated from it (not even giving them your e-mail), you're going to leak stuff that can be used against you, even if only by criminals (and the authorities in China couldn't give a rat's arse about their people swindling or stealing from laowai).

Like in the US, it's going to be "Free Enterprise" abusing data about even if the local authorities don't really care about you.