Sincere question: was it not common knowledge that these companies would hand over user data if compelled to do so by the government? What exactly is new about this revelation?
I'm not sure how others feel, but for me the systematic nature and the scope of collection are what get my hackles up. Requesting specific information on a specific individual because of the suspicion that a crime has been committed is perfectly reasonable. Collecting information on everyone in order to search for illegal activity feels like a serious violation of privacy. We can debate about the kind of information they can get through NSLs only being "metadata", etc., but that's the crux of the issue for me.
There is no evidence they collect information on "everyone". Everyone has denied the firehose feed hypothesis, even the NSA. Verizon didn't deny it, proving that there's no gag order, nor did the NSA. So we have Verizon admitting a metadata firehose, but everyone else denying it, which seems to suggest the tech companies are telling the truth.
I hope so. But we have no insight into how much information was put in the "locked mailboxes." From what we do know, it's reasonable to assume the NSA has been gathering as much information on as many people as is/was legally permissible.