metadata is what they are looking at now. they collect everything else so they can look at it later when they break the encryption