I don't mind reaching being done on my DNA. Where 23andMe crosses lines is let people search the archives that still contain all the PII attached, such as police departments. That is a breach of trust.
That's a great transparency report and I'm stoked to see that you actually appear to actively fight invalid legal requests for data.
According to your "Guide for Law Enforcement"[0] ... It's really just by luck/coincidence that you can even claim "We've never done that". Again - it's nice and mildly surprising to see that you haven't received an NSL yet. But I would bet $1,000 to charity that you will be legally forced/required/obligated to provide some PII/DNA data to law enforcement in the next 10 years.
A question: DNA samples, in a vacuum, don't seem particularly useful (even with a name/face attached). Does 23&Me aggregate medical histories to associate with DNA samples? If so, where do they get the medical data for specific individuals?
https://www.23andme.com/transparency-report/