The people doing the violating are going to double down. They don't want their critics being proved right. They don't want to be accused of being hypocritical. So what are they going to do?
As privacy activists, we need to make it easy for potential partners to cooperate with us. Right now, we're making it very difficult for potential partners to cooperate with us. We're putting potential partners in very difficult positions, and then asking why they won't support us?
It's kind of difficult when the privacy violations in question begin in secret. Consider police trying not to disclose their use of Stingrays, for example.
I somehow doubt police departments and intelligence agencies are going to agree to run all future uses of tech by a privacy watchdog, so how do you suggest getting ahead of the problem?
I don't have strong views on the right policy outcome, but it is not accurate to call this issue well litigated and/or settled law.
Just yesterday, NYTimes ran an article about DIA claiming a "commercial availability" exception to the only Supreme Court case addressing cell phone location data (Carpenter). If that is indeed DIA's rational, they are going to have some problems. For example, it is unlawful for the state to use commercially available thermal optics to surveil the interior of a dwelling without a warrant. I think DIA may be relying on dicta from Kyllo about devices in "common use", but their rational is secret so we won't know until it is... litigated.
[1] https://www.nytimes.com/2021/01/22/us/politics/dia-surveilla...
Presumably, this statement means that litigation will necessarily reveal the rational by presenting it.