[Nextgrid]

> If you wanted to open source how you patched Instagram, how would you avoid lawsuit?

Operate as if you were operating an underground drug marketplace or worse. If those technologies are able to thwart international law enforcement investigations, they're definitely strong enough to protect you from Facebook, not to mention that nobody will burn a zero-day to make Big Advertising happy when that zero-day can be better used to take down multimillion-dollar drug marketplaces (or worse).

If clearnet infrastructure is needed, put it in a country that gives the middle finger to the US. Being located there is also a huge bonus.

Alternatively, support copyright reforms and campaigns for privacy laws and their enforcement (which is currently lacking when it comes to the GDPR), so that such projects become unnecessary. In the meantime, don't use such services as much as possible.