European here. Governments in Europe, even ones that have GDPR on their books, literally act as oppressively as they want to act: U.K. orders Apple to let it spy on users' encrypted accounts [1]
[1]: https://www.washingtonpost.com/technology/2025/02/07/apple-e...
That's orthogonal to what op is saying.
You're saying agencies can be directed to opress people and organisations.
Op is saying agencies don't get to willy nilly look into the db of other agencies.
European here.
There are vast differences between how the different governments operate.