It's likely on the backend that this is "completely lawful" and was used for "lawful purposes" as deemed by the current US administration. There's probably even subpoenas on the backend.
Flock is required to comply with "lawful" requests and seems happy to do so.
This is largely the same for all major cloud camera operators. See also: Verkada and their facial recognition. These things are installed all over the place in public areas. And you think their facial recognition is compartmentalized to their specific tenant?