Policymakers automatically are assuming that private corporate infrastructure owned by national businesses and/or businesses operating in the country should be made as part of a surveillance apparatus. This is peak ignorance. The US cloud act makes this assumption without explicitly claiming such.

And I think here lies the opportunity for challenging this in court.