In my opinion, yes. This is an enormous security vulnerability. TikTok can exfiltrate any data that the user types into any application: passwords, any kind of sensitive data.

I think the objection is to the double-standard, where two apps commit the same infraction but one is assumed to be nefarious.