As someone thats very experienced with personal “information databases” there is an achilles heel. They can only collect what you tell them or put out there on the Internet so if you want to pretend to be a Muslim from Damascus with a false name and use it ir years thats what they’ll “know”. Of course, if you use multiple aliases from the same IP address they’ll pick up on that too.
It is an Achilles heel for individuals to use. Most people do not care, or are uninformed. This makes it very powerful for political purposes.