If I encrypt something client-side, the Patriot Act has no influence over it whatsoever. The only person who can decrypt it is me.
So, yes, they do need to break encryption. Especially as more and more apps move towards the "smart/encrypted client, dumb server as a storage dump" model.