I strongly disagree. You should always write rules under the assumption it will get in the hands of the worst people. If there is a 'become god-emperor' lever in your supposedly democratic government system then it is a shitty system.
Maybe so but what here really would've prevented this? The information involved is necessarily public: bank details and credit card numbers need to be shared otherwise why have them?
Writing a rule that says the government can't do this is just the government writing a rule it can simply remove it ignore when inconvenient.
No careful rulecrafting can survive the worst people being in charge.