You have to understand that national security letters (NSLs) are the tip of the spear here. If the target of surveillance is sufficiently bad or scary, the government has tools and absolutely will use them to get this information. Once that is normalized, and companies literally build platforms to service those requests, then that capability gets pushed down to federal investigators, then local law enforcement.