You're pointing out an orthogonal issue. If the US government wants your data and it's being held in a US company, then IT security isn't the issue, it's the l

You're pointing out an orthogonal issue. If the US government wants your data and it's being held in a US company, then IT security isn't the issue, it's the legal framework. No IT security will help when armed agents of the government legally enter your business and coerce you into handing over your data. The US Government can equally detain you directly and coerce you into handing over all of your data if that's what the law allows.