Not true; a substantial part of the Schrems II decision was about how the GDPR applies not only to law enforcement, but also national security surveillance. See eg ‘European Essential Guarantees.’