Yeah, it’s a weird dual‑use problem. The same libraries that make my code run cleanly can be repurposed for mass data analysis, and once that data hits a government server it’s hard to separate useful insights from surveillance. The key is transparency and strict access controls—otherwise the line between “useful” and “intrusive” gets blurred in code comments and policy lines.