...but we know it's possible under Swiss law, from this case, for them to be compelled to start logging specific account accesses, that they by default were not previously.

How is that any different from them being compelled to disable or weaken clientside encryption?

In both cases they're being compelled to make changes to their service.

The camel's nose is clearly already under the tent. Everybody needs to start diffing javascript served by them.