Hacker News Reader

you could ex-filtrate data by the same mechanism though (e.g posting images to twitter)

That might attract some attention, for example, in a corporate environment where everything is locked down.

Some things will seem very innocent though. Having a video call with a family member while sending out data under the noise floor.

In reality the amount of alerts a SOC has to triage is so big on avg I doubt they would really be looking into someone accessing twitter.