Because NSLs are very tightly constrained. They're only for telecoms metadata and subscriber information, and they're only for national security use.

There almost certainly were NSLs served on the shooters' phone companies---about the most reasonable use of them one can imagine. They would not compel Apple to do a thing about a phone held by its owner, the City of San Bernadino.