It would just be really easy to exploit the system, and ensuring that only authorized users have access opens them up to all kinds of restrictions on how they c

It would just be really easy to exploit the system, and ensuring that only authorized users have access opens them up to all kinds of restrictions on how they can process user data. e.g. I believe Google mentioned that their root GCP KMS keys are only accessible to a handful of people at the company. Not to mention: being inundated with requests from law enforcement would impose significant operational costs on the industry. Just being able to shrug when asked for this kind of data probably saves a lot of man hours.