Sure. No restrictions and I don’t see why there should be — why would some random company in the US be assumed to be any more trustworthy than a company not in the US?

There should be greater restrictions on info release and racking by US companies, but those restrictions should protect against all antagonists (corps, governments) both foreign and domestic. However there seems to be little impetus for protection at the moment outside some minor efforts in california.

Short answer, yes. The concept of "foreign governments" is very US-centric. This tracking is not a US-only concept and the connection of these data points is already being used in non-US markets by companies which cross these boundaries. The only differences with each market is the number of signals available for capture. For example one party operating in the US is capturing DNS activity while in Brazil they are capturing telecom data.

I worked at a isp back in the early 00s and we not only sold logged customer data but we would charge (separately) for the gov to colo a machine and get a span port.