I neither have nor want to have the capability to spy on telegram users. But criminal groups use telegram as infrastructure all the time - for example telegram webhook used as a exfiltration method for stolen credentials.

Telegram refuses to cooperate in any way, for example to close the group chat exfiltrated credentials go to, or even to disable the webhook.

This is analogous to Facebook knowingly letting ISIS use it for terrorist attack coordination. You can't just operate a company and ignore every abuse report.