Hard for you to restrict access of third parties. Easy for you to restrict your own.

That would make all the spying and surveillance harder and thereby reduce profits. And profit reduction is really the worst attack risk of all.