Yes, it's trivial for any state actor that wants to to get into these sites as users.