Alphabet, Meta, and others collect heaps of user data that could be exploited by law enforcement—and create legal hazards.