Inside the US, data services firms are governed by NSLs and the FISA court, offering impunity by way of legislated immunity and sanction.

Outside the US, they're subject to flat out illegal hacking, offering impunity by virtue of remote access and state-actor status. Though parties whose confidence is violated in that case aren't gagged from reporting this.

Where do we draw the line? It's clearly not willingly if they have a gun to your head. Would you move away from your friends and family for work? If your company announced they were moving out of the country, would you consider your decision to follow our not to be under duress?

These companies could have done more, but I think your standard for coercion is a bit high.