Yeah anything installed via a package manager, like an rpm or deb package, you can query to see what files belong to that package. Problem is they often have default config file locations, like in your home dir, where they will not ship and install files. (Though they might create them as part of a post install process)
Isn’t rioting part of French pastime that predates social media by like over a century or so?
Anyway, maybe if he gets those domain name block lists installed on browsers like he wants, he can just shut them down altogether at any time.