> [T]he US has privacy laws in place that will protect you [...] (the US makes some attempt to have laws apply to the government)

I believe the US stance is that nobody outside the US is entitled to court relief against the US government regarding their privacy, and nobody outside the US and EU is entitled to any relief at all, even from the executive (the “Data Protection Review Court” non-court, formerly the “Privacy Shield Ombudsperson”). In the EU, there are some protections in some countries but for example the GDPR specifically does not apply to governments.

I mean, the Chinese government is worse on this, but the US is nevertheless really bad and a number of EU countries also suck to a remarkable extent. Until the US press starts dropping the “of Americans” from their latest surprised-Pikachu headlines on “mass government surveillance of Americans”, I’m unconvinced the situation will improve.