"In many ways it is better to have this thing legislated: at least then it's out in the open. It's naive to think that large ISPs in countries without active legislation aren't linking intelligence agencies into their networks."

How about the other option: we make it strictly illegal for ISPs to cooperate with intelligence agencies (or anyone else asking for data) unless there's a warrant involved (and even then only to the extent of the warrant).