We've seen many occurrences where private or sensitive information has been compromised due to carelessness or incompetence by employees. Sometimes this is the result of credentials that have more permissions than required, or due to carelessness, or poor security policies. Other times we have seen employees abuse access for personal reasons. I don't know what's going on with DOGE, and I don't know if it's illegal. The reporting and testimonials do not inspire confidence that the data is being handled in a careful and secure manner.
If the lawsuit proves everything is above board, that's great, and I would not consider it a waste of time by EFF. I would attribute the needlessnes of it to the lack of transparency and accounting by the government agents.