Depends on your level of cynicism whether they'll follow the guardrails, but they do have some;

> Federal government agency access to BOI. Under the Access Rule and as authorized by the CTA, FinCEN may disclose BOI to Federal agencies engaged in national security, intelligence, or law enforcement activity if the requested BOI is for use in furtherance of such activity. “Law enforcement activity” includes both criminal and civil investigations and actions, such as actions to impose civil penalties, civil forfeiture actions, and civil enforcement through administrative proceedings. Prior to requesting BOI, Federal agency users will be required to certify that the agency is engaged in a national security, intelligence, or law enforcement activity and that the information requested is for use in furtherance of that activity. They will also be required to provide the specific reasons why the requested information is relevant to the activity.