Except the human cost and resulting PR nightmare if a terrorist attack happened that they could have in principle prevented (e.g. if the terrorist had collaborators, and information on the phone helped find them).
> I don't think this was a particularly difficult thing to do.
Very easy to say when you're not the one responsible for that $800bn company ... if you're a decent human being, you're probably not worried about your own wealth in that situation, but the livelihoods of all your employees and other entities that rely on you. Every decision carries weight. The value of your company is not always empowering; the higher its value, the larger the consequences if you're wrong.