“But we are a law-based state operating very tightly within a legal framework and a ...
cultural environment and that is where your protection must lie.”
Another version of Trust Us.
Along with these law-based restrictions is the total absence of morals by GCHQ such as copying Yahoo selfies, etc.
The UK has, effectively, no independent oversight, either - just retired stiffs like Rifkind who approved most applications he was asked for.