It seems like something obvious enough that I would be surprised if it wasn't already done.

The sheer volume of data and highly motivated state actors who are outside any legal risk both seem pretty high.