Right, it's mainly in terms of data retention that we can follow a regulation that's stricter than the default, but government access rights we indeed can't do anything.
Whether it will be a problem or not, we'll see. With the recent improvements to E2EE I'm still hoping that we can make it the default eventually, as it's the best way to secure user data even from someone with access to the server.