An interface to request data wouldn't be a back door, as that falls under the "request/response" model. "Here is our warrant for Person X by judge Y in district Z" != "sudo apple-get * /mount/nsa" The important distinction there is that each request is an individual request and can't be automated / done in bulk / wholesale.

I'm very interested to see how the device vs. account data-request ratio maintains/changes with the release and adoption of iOS 8.