Legal restrictions are good as far as they are heeded. Legal restrictions usually include some "emergency" exception mechanism.
The government merely needs to torture some facts to meet "emergency" criteria, and, behold!, all of those heretofore useful capabilities do the unexpected.
One can call this an "entirely theoretical risk", but, given recent abuses, others might call it an inevitability.
Now, given the track record of the Chinese government in matters of this type, it is highly likely they will use their legal right and get the information they want/need.
As regards severity, this element is individual: what could be the damage if a particular piece of information would leak? The more sensitive information is, the more damaging the leak may be (and more likely it will be wanted/needed). So if we’re talking about Taiwan, then yeah, aerial imaging information is probably quite pertinent to the Chinese government interest, sensitive or not.
So I’d say this risk is material.
Plus, I have heard plenty of first-hand accounts indicating certain Chinese drone company being very cosy with the Government, enjoying massive subsidies, so likely cooperating without much hand-twisting needed.
This is just bog-standard operating procedure.
Just because they aren't telling us, does NOT mean we can therefore infer that nothing more exists.
The alternative of "let's just assume spies have something they don't wish to disclose, except they kind of do and want to put it in the papers" strikes me as a bit too trusting but I can't tell you what to think.
US has all but banned Chinese drones for most govt-related flight ops.
Japan has banned Chinese drones.
In Europe, internal risk-assessment memos are circulating advising security agencies to avoid using Chinese drones.
You’re missing a massive part of the context here.
This particular article may be missing factual evidence to support some of the voiced concerns, but it’s hardly a singular shout in an ocean of silence. It strongly resonates with a rather diverse chorus of voices coming from multiple independent sources.
So yeah, it’s a thing.