I stopped being surprised about stuff like this. Silicon Valley exists to provide technological supremacy and/or hoard private information through temptation rather than force. To clarify: the approach currently employed by the NSA is funding and otherwise supporting and coordinating subverted or subvertable technological companies. The companies will then deliver a product with superior fitness for whever purpose it pertains to serve. People will use the product for those features, forgetting or not knowing it also obliberates their privacy and leaks all information to the TLA's. The American government thusly provides a platform for the enhancement of technology, the economy and the national security. Overall, pretty damn good deal. It's unlikely that Google rules the NSA or vise versa. Most likely the collossus goes where the collossus goes, and the NSA steals through it's massive infrastructure like lice in it's pelt. Unlike lice, the NSA is entirely symbiotic with Google. They excert force, mutually, for control, but so long as people use Google, Google will collect and the NSA will see. The same applies to every other tech startup out there. Note that "compliance" can be subtle. It can be a National Security Letter to key individuals, a janitor or a CEO, or it can be an undetectable exploit in a router. It can be an undercover agent that came upon good knowledge of how to achieve a key position. Most likely a wealth of methods is used simultaniously, none admitted and without mutual knowledge of activities. If not, dear NSA, please take this as a humble recommendation. So, does it surprise me that through incompetence, complience, negligence, malintend or all of the above, this happened? Nah. Tell me once USGOV starts jailing people for these slights. Being too obvious about it should be punished, don't you think?