Good blog post in the privacy and national security (that's US national security) concerns of TikTok, by @malwaretech, who decided to have a look whether the app actually asks for location permissions https://malwaretech.com/opinions/tiktok-is-a-national-security-risk.html
TikTok is a National Security Risk, Not A Privacy One – MalwareTech

An analysis of the threat posed by TikTok and why we need to weigh our options carefully.

@martijn_grooten @malwaretech

I wonder if they have looked at this? (Third from the bottom)
https://penetrum.com/research

Penetrum LLC - Research, Development, and Security. Made Simple