I don't see how it's different from Amazon or Microsoft datacenters in the EU, which are not safe from the US government. As long as the US parent company can somehow get at the data, it is obligated to do so when a US agency asks for it.

Looks like it's still owned by Mozilla/MZLA and thus subject to US jurisdiction.