The alphabet agencies get caught so often that illegally spying on their “subjects” must be standard practice.
It's been that way for decades, at least. Laws are passed to "legitimize" ongoing surveillance, and literally 100% of internet traffic is available to snoop.
Because it's for safety.
The laws have what appear to be remedies written into them, but these are illusory too. There was a case consolidated in the Nonth circuit, oh, maybe eight, ten years ago. Those snooped on "had the receipts." Case concluded by the courts acccepting state secret as the defense.
There is no remedy at law for a rogue government. The courts are part of the same apparatus that rules. Nothing but tough talk and platitudes about how privacy is sacrosant. All BS, by an "all BS" government.