A twitter account (or any other social media account) is PUBLIC. There is no expectation of privacy for people who post on the internet (a fact that far too many people will only face once the surveillance state turns on and they are questioned about prior posts or flagged as dangerous for certain activities).
This.
Public is public. If the OP *had* found Tom's personal Facebook, X.com, Instagram, or any other social media account, you could share links to those profiles all day long.
PUBLIC = PUBLIC
If you don't want it shared with the entire world, don't post it on the public Internet! Duh!