Yes, your boss is not allowed to talk to you about national security letters, unless your specific involvement is needed.

I as an outsider can't tell and have to trust. For that I have to evaluate how important your site as a target for such measures is, how likely I am the target and how likely my data is just close to a Target's data and how much of it will be in a full data grab for later usage.