In my experience there's almost always a way in which things like this can be abused, which is why I lean more towards it being made illegal altogether and accepting the cost of not having mass surveillance. I am yet to find a way in which its not a large can of worms no matter what you do.

But if prohibiting mass surveillance is not an option, the second best thing would be good checks that make sure tools like this can't be used in silence.