> you still need the user's willfull cooperation.
Not always, especially when law enforcement can request data straight from the provider, which I would imagine happens in the majority of internet crime investigations. Because let's be real, how many internet companies have a zero knowledge policy towards their users' data?