Naive answer: if lawmakers disapprove, they can just ban companies from helping people counter mass-surveillance efforts.