Wouldn't they need to get some kind of court approval to use NSO software on an American?
The UK then conveniently has an agreement to share intelligence it has gathered with the US.
If the UK shares intelligence that happens to coincide with a person of interest even if they are American, well, shrug.