I think that's a good rationale. Although much of the surveillance happens by private companies, which can entail it's own risks separate from state actors.