We are not restricting the surveillance, just making it more expensive.

What we need is forced inspections of the source code and other ways to actually mitigate the security risks.

Just making things more expensive does nothing to mitigate actual the risk.