Worth noting that companies in the United States are subject to secret and forced surveillance by the US government (NSLs), and enforcing that surveillance also requires a degree of forced control as well. There is legal recourse for NSLs but it's ineffective and basically never works.

>The government can mandate spy code be inserted and any data they want.

Essentially true for US government with US companies too