It sounds like it’s simply on cities to configure their Flock accounts properly to prevent access.

Pretty sure the data is stored in Flock servers, not city data centers, so feds could obtain access at any time via subpoena