It's easy to create hypotheticals. Who would you suggest should decide, when shown evidence that a spear phishing that stole thousands of dollars came from an

It's easy to create hypotheticals. Who would you suggest should decide, when shown evidence that a spear phishing that stole thousands of dollars came from an email account, whether the provider should be requested to hand over data. Policing isn't all poo cams. I'd prefer that a judge tell me whether the police have sufficient evidence for a data request than have to make that call myself.