I guess it depends on what you mean by a "backdoor"; being able to remove any CSP added encryption upon request and being forced to explicitly add easily enable

I guess it depends on what you mean by a "backdoor"; being able to remove any CSP added encryption upon request and being forced to explicitly add easily enabled monitoring tools (only if above a certain size or if the CSP is considered likely to be served warrants) is a backdoor by quite a few people's definition.