> So the US legal system can say "give us this data" but they don't have access as they are on another company's servers in another company's data center operated by another company's staff.
US institutions don't hesitate to demand their companies to implement secret backdoors in their hardware or software, as evidenced by Snowden's leaks (for Cisco routers) and the Lavabit shutdown (mail company ordered to implement a tap on their clients' data).
Sure, you can have all you described, but how are updates vetted?
