Why do we assume that the DS uses open private networks, like social media, discord and such?
It is much more likely that they use reviewed multi-layered SSL tunnels into closed distributed private networks. Anything less would be sloppy and incompetent.