Exactly, if you want to do something truly illegal, like dosing citizens with LSD, you need shady government agencies. But so much of the shady shit the government wants now is only illegal for the government to do, so much easier just to let a private company do their data-collecting legally, and buy that.