I mean national security agencies usually have their own extensive internal monitoring.

EU rules typically contain carve outs for national security matters too.

This is a bad law, but these carve outs are normal and expected.

Carve outs for politicians are a different matter.