There's a very practical issue as well--you can't just say "Oh, well, this machine only hoovers up packets from foreign nationals coming across the wire". It's far, far simpler just to grab everything, and so the practical tendency is to do that. And once the machinery is into place, and the invoices paid, and the appropriations made...well, you're not going to turn it off so easily.