I feel it's safer these days to assume any digital product that's owned by a Chinese parent company is compromised, than assuming it isn't.
I assume a Chinese company would laugh at a National Security Letter? Since I'm an American, I don't worry about China having my data.
That's an anecdote, but the point is that one can't rely on Norwegian courts for enforcing privacy.