This is a victory in a long fight, not just against blanket police surveillance, but also against a culture in which private, for-profit companies build special tools to allow law enforcement to more easily access companies’ users and their data—all of which ultimately undermine their customers’ trust.
There is no victory here. They just made an announcement. They haven’t done shit.
They also left themselves an exception for emergency situations, without judicial review.