Collecting and storing the information is the real problem. The focus on warrants is a distraction.

Access control (warrant) doesn't prevent a breach, and the system is not architected in a way to prevent internal abuse. The best way to prevent the abuse of data is to not collect or store it at all.