Well, for one, Twitter is under a 20 year consent decree with the FTC and all of the relevant leaders in charge of this resigned this week and individual twitter engineers now need to "self certify" that they're complying with the decree.
People who have intimate experience with just exactly the degree of latitude the FTC will allow for twitter and have a personal relationship that allows them to negotiate with the FTC isn't exactly a skill you can just find on the street.
For details, there are at least 2 issues with the FTC.
in 2011 there was a settlement about Failure to Safeguard Personal Information [1].
"Under the terms of the settlement, Twitter will be barred for 20 years from misleading consumers about the extent to which it protects the security, privacy, and confidentiality of nonpublic consumer information, including the measures it takes to prevent unauthorized access to nonpublic information and honor the privacy choices made by consumers.
Then in 2022 FTC charged Twitter for using account security data for targeted advertising. They have a $150M fine and some other conditions [2].
People who have intimate experience with just exactly the degree of latitude the FTC will allow for twitter and have a personal relationship that allows them to negotiate with the FTC isn't exactly a skill you can just find on the street.