But that is his point with "or the government can always do it indirectly with the same effect"

The company doesn't have that power, but the government can compel companies to provide them with the same data as long as it exists, and then abuse it in the same way as if they had collected it themselves.