The whole "scrutinize for legality" bit is overwrought and makes me question this whole thing. Are we to expect that every request has been established as perfectly legal? No. Dropbox isn't big enough to fight the government in court, and the legality of FISA requests hasn't been definitively established.