Your latter example seems legitimate. I think there is a clear difference between complying with a judicial request/order about a specific user and enabling log

Your latter example seems legitimate. I think there is a clear difference between complying with a judicial request/order about a specific user and enabling logging by default. If one wants more than that, then one better own the bare metal of a mail server. In any case, I expect legitimate companies to comply with the law.