[dane-pgp]

> Concrete adversarial scenarios are in fact helpful from a policy and planning perspective.

Right, and I'm saying that an agency which is tasked with gathering all this private data about innocent citizens, without a warrant, is going to attract people who will want to abuse it, just as other mass surveillance agencies have abused their powers in the past.

How much more concrete do I need to be? Do I need to give the names of actual Norwegian threat actors who I think might want to infiltrate this agency, and specify who they would sell the data to, or which of their ex-partners they would spy on, or which opposition politician's spending habits they would leak to which paper?