I'm torn on this matter. A part of me wants to believe that a fully acknowledged state of emergency privacy exception, organizationally siloed and bounded by well defined purpose and expiry, could be less erosive in the end than than something that tries hard to dance along the borders of regular privacy expectations and sets the new "acceptable" by precedent.