The cases you are citing are all unauthorized accesses and abuses, not systematic government policy. Your argument seems to be that because a law could be broken, then it must be being broken, which is hardly useful.
The law can be broken, there is abundant evidence that it is broken constantly, and there is very little to no accountability when it is broken. There may as well be no law at all. The entire fucking program was illegal for years and it didn't stop them. They literally don't give a shit if what they're doing is illegal.
