The TL;DR is that they collect and forever store sensitive data in the cloud, meaning that the US gov could almost certainly access that data and any other government could access any one person's data too just by brute forcing a PIN