It's not just that they have no obligation they are legally required to comply with subpoena requests and provide any and all data that an independent judge has deemed necessary.
You can't have realistically have a situation where the entire management team goes to jail for refusing to comply with them. Nor is it necessarily wrong for them to choose to respect the law even if it's a bad law.
I have, for north of a decade, not understood why this sort of thing hasn't triggered the exact same alarms that outright government-run mass data collection and spying would—if the government can pay for the data, can strong-arm to get the data, and can subpoena the data, it's barely better that a private company is collecting it, than the government, if your concern is government mis-use of data. No one should be allowed to collect and hoard information about people the way big tech companies (and some others, like CC companies and banks) do, for exactly the same reasons that we don't want the government doing that itself.
Governments can kill you, and brag about it publicly.
But that's not what it was. The same people who were trying to get people to delete tracking apps would have also said "Don't talk about this through Meta apps" also.
It's a bit outside of what Facebook did, whether they should have complied or risked consequences, etc.
As an aside, Signal people. If you want to chat discreetly, Signal.
The idea that Twitter is a threat doesn’t go down well with the Twitter crowd.
Same is true for FB, etc.
I personally had to explain to a number of people, face to face, that whatever threat is posed by menstrual tracking apps is nothing compared to FB, Twitter, and Google.
People seemed especially suprised that Twitter was a problem.