People defending TikTok are generally questioning the risk of this data being weaponized by the CCP and whether it's even much of a weapon and whether that's worth it to ban them over. Not over whether TikTok voluntarily follows some privacy guidelines -- on that it's generally assumed they're either already vacuuming up all they can, or could turn that on at any time.
The US government has a very long history of simply lying about things when it fits their goals so independently verifiable evidence is what's needed. The German government is still waiting for the promised proof about Huawei backdoors, by the way. This was promised when Trump was president. The US didn't produce any proof whatsoever and leaks even showed that the NSA couldn't find anything even after gaining access to Huawei's systems. The UK also said that the US never produced any evidence for any of the claims.
Now it might still be true that there's things going on but there's a huge difference between saying "We don't have proof but we obviously cannot be sure" and claiming to have proof.