Comment by devconsole

Agreed, but the sheer scope of this operation forces us to consider whether the authorities are playing by all of the rules. Since we don't know which rules are still reliable, the best defense is simply to assume your server is compromised from the start. And, incidentally, your support staff.

By the way, I'd also like to thank everyone for the thoughtful responses. It's great that people are thinking about this problem.