But they at least have to make the effort to break into those systems. Presumably this takes more time/money than an NSL, and it possibly leads to detection of

But they at least have to make the effort to break into those systems. Presumably this takes more time/money than an NSL, and it possibly leads to detection of the vulnerabilities used in the hack.