It’s the “least controversial idea” if you have faith in the government to do the right thing. Many people don’t, for one reason or another. Fortunately, more people (and companies) are realizing that liabilities like this can be absolved by simply not having the data, or access to the data, in the first place. This involves storing data locally on client when possible, using end to end encryption when possible, encryption by default (the default on latest HTTP, DNS, etc), and simply not holding sensitive data in the first place. There’s still work to do, but we are moving in the right direction.