Because they aren't the ultimate targets. They're trying to get their credentials, access and capabilities, so they can then go after whoever they're really interested in without having to ask, bribe or compel the company.
Open question whether their ultimate targets are terrorists or "everybody."
Open question whether their ultimate targets are terrorists or "everybody."