” If government surveillance performs as advertised and yields a substantial security benefit, there’s a debate to be had over how much government intrusion we’re prepared to countenance as the price of that security. But that security benefit has to be proven, not assumed.”