Almost all nations have standing armies. But, in isolation, that statement is very deceptive. Only dozens of nations could successfully invade a neighbor. Less than a handful of nations could mount sustained wars across an ocean.

Since surveillance budgets probably track military spending, there are probably many places where surveillance is as ineffective as their military.

But your bottom line is correct: "If you hold the keys the governments can't get to your data by going through your service provider."

Not only are those wise words for users, enabling that way of working, and making security an easy verifiable default is going to be the only way to heal this problem for US tech companies. And they have been slow to get started.