I don't think NSL can even be used request the actual content of the recordings (vs. "just" the metadata) - a judge would have to sign off on that. Now, clearl

I don't think NSL can even be used request the actual content of the recordings (vs. "just" the metadata) - a judge would have to sign off on that. Now, clearly there's a lot of questionable practices like secret courts, gag orders and ineffective oversight in general, but this is still far from "for data on big corporation's servers, the NSA already gets a copy of everything", and very far from "being forced to deploy a firmware update that turns a smart home devices into a bug". Companies act exclusively in their own interests, which I would hope includes to not engage in covert surveillance of their own customers. This will only stay this way if we keep demanding and expecting privacy, and push for stronger oversight. But defeatist claims like "the NSA gets all data anyway" are not useful.